All customer data is stored and processed in Google Cloud's Warsaw region, with backups in a second EU region.
AI processing runs inside the EU. You can switch it off per feature, and the product stays fully useful without it.
Your data is never used to train AI models, by us or by the model provider.
Encrypted in transit and at rest, with a separate key for each customer. Enterprise customers can hold their own keys.
Each customer's data is separated at three layers, and cross-customer access is tested on every release.
Our staff can only see your data after you approve a request. Access expires after 24 hours and every action is logged.
An append-only, hash-chained log of every action, which you can export or stream to your SIEM.
An independent penetration test of our platform every year, and ISO/IEC 27001 certification on our roadmap.
You control retention, and you can export everything in open formats or delete it at any time.
Fast to start, hosted in Warsaw.
Your own isolated environment and encryption keys.
In your own data center, fully offline if required.
We are happy to walk your team through how we protect your data.