Security and data
How we protect your data and comply with GDPR and the EU AI Act. A data processing agreement is available on request, before we start.
Your data stays yours
- Systems run in your accounts where possible
- We never train AI models on your data
- We use provider business tiers where data isn't used for training
- We delete our copies when the project ends
GDPR
- We sign a data processing agreement (Art. 28 GDPR)
- EU-hosted providers where possible
- Data minimisation — only what the task needs
- Clear retention and deletion periods
The AI Act
- Every chatbot and voice assistant says it's an AI (Art. 50)
- Generated content is labelled where required
- We don't build prohibited or high-risk systems without a separate assessment
- We help with team AI literacy (Art. 4)
Access and control
- Least privilege — access only to what's needed
- Two-factor authentication everywhere
- A log of every agent action
- Human approval for payments and irreversible actions
Security questions? Email woof@digital-dackel.com.