SecurityPlatform
How we protect your compliance data.
Your compliance data is sensitive. Here is what protects it, as our privacy policy states it.
Art. 32 GDPR
Technical and organisational measures.
The measures our privacy policy lists for the platform.
Encrypted in transit and at rest
TLS 1.3 between your browser and the platform, AES-256 for stored data.
Tenant isolation
Each customer organisation is strictly separated from every other.
Role-based access
Fine-grained permissions decide who sees and changes what.
Tamper-proof audit log
Hash-chained logs record what happened, and by whom.
Separate databases
Authentication, documents and the AI agent each keep their own database.
Security audits
The platform's security is audited regularly.
AI and your data
Your data does not train the model.
The AI features use the Google Gemini API. Data is sent to it only to provide those features, and Google does not use data submitted through the API to train its models.
Frequently asked questions
Your question is not listed? Ask us directly.
Talk to usIs my data encrypted?
Yes. In transit with TLS 1.3, and at rest with AES-256.
Can other customers see my data?
No. Each customer organisation is isolated from the others, and role-based access decides who in your own team sees what.
Is my data used to train AI models?
No. The AI features use the Google Gemini API, and Google does not use data submitted through it to train its models.
Which services process my data?
Our privacy policy names every service that processes personal data and the safeguard for each transfer outside the EU.
