Security & Trust
Built for enterprises
that cannot afford surprises.
We handle sensitive financial data, operational workflows, and enterprise documents. Security is not an afterthought — it is embedded in every layer of how we build and operate. This page documents our current posture and where we are heading.
What is in place today
Current security controls
Compliance posture
Certifications & frameworks
GDPR
AlignedWe process personal data of EU residents in accordance with GDPR principles. Lawful basis documented, data retention limits enforced, data subject rights supported, sub-processor agreements in place.
SOC 2 Type II
In ProgressWe are actively building toward SOC 2 Type II certification across the Trust Service Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. Target audit window: Q1 2027.
ISO 27001
RoadmapISO 27001 certification is on our roadmap following SOC 2. As an internationally recognized standard, it is particularly relevant for our European and government clients. Target: Q2 2027.
Data handling principles
How we handle your data
We do not sell your data
Your data is used exclusively to provide the services you have contracted. We do not sell, license, or share personal or operational data with third parties for advertising or analytics purposes.
Minimal data collection
We collect only what is necessary to deliver the service. Document content processed through our AI pipelines is not retained beyond your configured retention period and is never used to train models.
You own your data
You can export or delete your data at any time. On contract termination, personal data is deleted or anonymized within 90 days. We provide export tooling for all structured data we hold on your behalf.
Need our security documentation?
We provide a security questionnaire response, sub-processor list, and data processing agreement for enterprise clients. Request via our contact page or reach out directly.