Trust & Security
Security
- • Encryption at rest and in transit; key and secrets management.
- • Regular penetration testing and vulnerability remediation.
- • Access logging and least‑privilege controls.
Data residency & retention
EU data centers by default. Retention windows are configurable per tenant, with export/delete supported to meet GDPR obligations.
Sub‑processors
Hosting provider (initial list). Future sub‑processors will be listed here with change notifications.
EU AI Act statement
ContentCloud products are general‑purpose content tools, not intended for high‑risk decision‑making. We commit to transparency (AI indicators & citations), human oversight, risk management, logging and post‑market monitoring.
Documents
- • Data Processing Addendum (on request)
- • Security overview (this page)
- • Incident response summary (on request)