Security & data
The checklist IT and legal will ask for, answered upfront.
Everything on this page is verifiable in the contract and in the system audit trail. No fine print.
Architecture
A dedicated instance per client
Each client runs on a dedicated, isolated instance. Your data never shares space with anyone else's.
Data
Dedicated, encrypted infrastructure
Dedicated, encrypted infrastructure with configurable data residency and retention. EU hosting (Germany/Finland) available from day one; certifications such as HIPAA or CCPA are assessed in the diagnostic.
Contract
Data-processing agreement first
A signed data-processing agreement (GDPR art. 28) before we touch a single record.
AI
Your conversations never train models
The language model is Anthropic’s Claude: your conversations are not used to train its models, and processing is covered by its standard data-processing agreement. The agent identifies itself as AI from the first message.
Audit
Everything is logged
A traceable record of every conversation and every action executed in your systems, reviewable by your team.
Human control
A person, always one message away
Customers can ask for a human at any time and the conversation transfers with full context. Time-to-human is measured on the dashboard, with an internal service target of answering 95% of those requests in under 3 minutes.
Testing
Hundreds of tests before every change
Every release goes through an automated test suite and a quality evaluation of the replies with hard-fail safety criteria. If something fails, it does not ship.
Failures
Never goes silent
If the model fails or a conversation exhausts its budget, the agent says so, alerts the team, and hands the conversation to a person. Silence is not an option.
Deployments
No lost messages
Deployments wait for in-flight conversations to finish before restarting. A message in transit is never lost.
Metrics
Telemetry without personal data
Dashboard metrics are stored without conversation text or personal data: only events and reasons from a closed list.
Where the data goes
What stays in your instance, what goes to each provider and who sees what.
Subprocessors
Who the system works with, and what for.
No SOC 2 certification as of today; in exchange, we answer any security questionnaire from your team in under a week.