Security
How we handle client data, where the systems are located and what happens to the data inside the agent processes.
Client data
The client's data stays the client's data.
- Customer data is not used to train models.
- We do not pass it to third parties without written consent.
- Access to the data is given only to those who need it for their work.
Hosting
The systems run on cloud infrastructure in the European Union. Data does not leave the EU.
- Data does not leave the EU.
- Backups are kept within the same legal area.
- Access to the infrastructure is through named accounts.
Data in agent processes
Every step an agent takes is written to the log.
- The log shows which agent worked with which data and when.
- Sensitive fields do not reach external calls without explicit configuration.
- A failure in an agent stops the process and passes the task to a human.
Access
Access rights are granted by role.
- Rights are granted by role, not personally "just in case".
- Accounts are closed when the work ends.
- Secrets are kept in a protected store, not in the code.
Incidents
We tell the client about an incident rather than staying silent.
- We report the fact and the extent of the data affected.
- We record the cause and the measures taken to prevent a repeat.
- We keep to the notification deadlines set by the GDPR.