Compliance

Where we stand, and what is under way.

Procurement and security reviewers should not have to call sales to find this out. Each framework below carries the status of our work — nothing more, nothing implied.

Frameworks

The frameworks we are working towards.

Five today. The list grows as our obligations and our clients' obligations do.

  1. GDPR

    work in progress

    Aligning our processing records, subprocessor list and retention rules with the Regulation, and keeping client data on EU-hosted infrastructure by default.

  2. EU AI Act

    work in progress

    Mapping the AI systems we build and operate against the Act's risk categories, and putting the documentation, logging and human-oversight practices the higher categories demand into our delivery process.

  3. EU Data Act

    work in progress

    Reviewing our contracts, data-access provisions and switching terms against the Act, so client data stays portable and the exit path stays open.

  4. TISAX

    on the way

    Assessment preparation is under way — information-security controls are being documented and gaps closed ahead of an external assessment.

  5. ISO

    on the way

    Building our information-security management system towards the ISO/IEC 27001 structure, with an external audit planned rather than behind us.

Each status above describes work in motion — not an achieved end state, and not an audited outcome. When that changes, this page changes with it, and only after the site owner has signed off on the new wording.

Need something specific for a vendor review?

Tell us which framework and which control set your review covers, and we will send what we have today — including where the gaps still are.

Talk to us about your review