Security & Trust
What we do with
the data you trust us with.
Kanso holds your quality records. Workforce reads your invoices and contracts. This page lists the controls in place today, in plain terms, and what we can send your security team. For the technical detail, see the security page.
What is in place today
Current security controls
Personal data
Data protection
GDPR
AlignedWe handle the personal data of people in the EU in line with GDPR. Our privacy policy sets out what we collect, the lawful basis for each use, and how long we keep it.
Your data
How we handle your data
We don't sell it
We use your data to provide the service you signed up for. We don't sell it, and we don't share it with advertisers or data brokers.
We don't train on it
Workforce agents run on Anthropic Claude and Google Gemini models through their APIs. Your documents go to the model for that call only. We don't train models on them.
It stays yours
Customer data belongs to the customer. When an account closes you have 30 days to export it, and personal data is deleted or anonymized within 90 days unless the law says otherwise.
Running a security review?
Send us your questionnaire and we'll answer it in writing. We can also sign a data processing agreement before you start with Kanso or Workforce.