Security & compliance
Your data security, by design
France hosting, GDPR compliance, guaranteed uptime and audited security controls. What your IT teams, CISOs and RFPs expect.
Data protection
Your data is never used to train our models, nor our technology partners' models.
Hosted in France
Your data is hosted in France, within the European Union.
GDPR-compliant by design
Data protection is built into every step, not bolted on afterwards.
DPA (art. 28) available
A data processing agreement governs our processor role, on request.
Availability
99.9% guaranteed uptime, contractual SLA (see our Terms).
Our uptime commitment is contractual: calculation method, maintenance exclusions and terms are set out in our conditions.
Compliance & certifications
Our information security management system (ISMS) is built to align with ISO 27001 requirements and incorporates SOC 2 controls. ISO 27001 certification in progress.
Security governance relies on strict access controls, an annual third-party penetration test, and notification of any data breach within 72 hours.
Security controls
The technical and organizational measures that protect your conversations every day.
Encryption in transit
All communications are encrypted using TLS 1.2 or higher.
Immutable audit log
Sensitive access and actions are recorded in a tamper-proof log.
72-hour notification
In the event of a data breach, notification within the regulatory 72-hour window.
Annual penetration test
An independent provider runs a penetration test every year.
Access control
Multi-factor authentication and least-privilege access.
Data not used for training
Your data never feeds the training of our models or our partners' models.
A CISO audit or RFP in progress?
We provide the additional materials under a confidentiality agreement.
Contact the security team