Your data, in your region, under your terms.
Deployed inside your perimeter, data never leaves your infrastructure. Identity separation is architectural, not procedural. Legal basis, sub-processors and retention are set out below and in the contract.
Six commitments.
Residency
EU, UK and US. Deployed inside your perimeter, data never leaves your infrastructure.
Identity separation
Architectural, not procedural. Models see values and an internal ID, never personal data (PII / PHI).
Legal basis
GDPR Article 28 processing agreement and Standard Contractual Clauses as standard. HIPAA business associate agreement for US deployments.
Security
Encryption in transit and at rest; in perimeter deployments key management stays with you.
Sub-processors
A published list, kept current. Advance notice of any change, with a right to object.
Retention
Retention periods configurable per deployment. Export and deletion on request.
Documentation · full detail and the current sub-processor list available on request.
Need the details?
We share our security documentation, audit reports and sub-processor list with prospective partners.