Skip to main content

Trust & Security

Security

  • • Encryption at rest and in transit; key and secrets management.
  • • Regular penetration testing and vulnerability remediation.
  • • Access logging and least‑privilege controls.

Data residency & retention

EU data centers by default. Retention windows are configurable per tenant, with export/delete supported to meet GDPR obligations.

Sub‑processors

Hosting provider (initial list). Future sub‑processors will be listed here with change notifications.

EU AI Act statement

ContentCloud products are general‑purpose content tools, not intended for high‑risk decision‑making. We commit to transparency (AI indicators & citations), human oversight, risk management, logging and post‑market monitoring.

Documents

  • • Data Processing Addendum (on request)
  • • Security overview (this page)
  • • Incident response summary (on request)