Legal & complianceDebugInit, in writing
Everything we put in writing.
The policies, the addendum, the security posture and the AI governance position — in one place, written to be read rather than to be survived. Where a fact is not yet settled, these pages say so instead of filling the gap with something plausible.
The documents
Nine pages, no surprises.
Privacy notice
What the site collects — almost nothing — and how product data is held on your organisation's instructions. Rights, worldwide.
Data processing addendum
The Article 28 commitments, summarised, with the annexes a buyer asks for.
Subprocessors
Everyone else who touches customer data, named, with notice before it changes.
For a security review
What to send your buyer.
- The short answer
Point them at security and AI governance. Those two cover most of a questionnaire, and both are explicit about gaps.
- The contractual answer
The addendum and the subprocessor list. Ask us for the executable version.
- The question we cannot answer on a page
Anything specific to your deployment — region, retention, which modules, whether your use is high-risk under the AI Act. Those need a conversation, and we would rather have it early.