Trust & compliance

Everything your security team needs.

The documents, the standards, and the data-residency detail that procurement asks for, in one place. Request the trust pack and we will send it over.

Request the trust pack Security posture

Standards

What we are built to.

We write what is true and never claim a certification we do not hold.

Built to ISO 27001 standards

We operate the platform to ISO 27001 standards.

GDPR compliant

A legal posture, by design.

EU AI Act aligned

Designed for EU AI Act alignment.

Audit-ready by construction

Every review is recorded the moment it runs.

The trust pack

The documents, in one place.

Available on request. Tell us a little about your organisation and we will share the pack that fits your review.

Data Processing Agreement

Our standard DPA, covering roles, processing purposes, and your rights as controller.

Subprocessor list

The current subprocessors we rely on, their function, and the region their processing runs in.

Security overview

How we build and operate the platform to ISO 27001 standards, with our controls summarised.

Data residency statement

Where case and contract data lives, and how a single-tenant environment keeps it in region.

Records and audit

How every output is recorded the moment it runs, and what an audit export contains.

Business continuity

Backup, recovery, and incident-response practices for the platform and your environment.

Subprocessors

A short, current list.

We keep the subprocessor list short on purpose. Each one has a clear function, runs in a stated region, and is bound by a data-processing agreement. The current list, with functions and regions, is part of the trust pack and is kept up to date.

Request the current list

Bring procurement to the table.

Tell us what your security review needs, and we will send the trust pack and answer the questions in writing.

Request the trust pack See the platform