GDPR, ISAE 3000, and EU AI Act 2027. The documentation is part of the product, not an appendix.
Privacy
Documented in every audit line. Data processing agreement based on GDPR with roles explicitly defined. No resale, no tracking pixels.
Audit
Independent third-party audit of access controls, logging, change management, and sub-processors. Report provided to Private Cloud and Enterprise.
Regulation
Audit trail and model governance are in place well before the regulation takes effect. SHA-256 signed ledger per call.
Isolation
No connection to public internet. Air-gapped deployment available for classified environments and defence workloads.
Documentation
DPA
Data processing agreement ready the same week as signature.
ISAE 3000 report
Type II statement from an independent auditor.
Audit ledger
SHA-256 signed log per call, exportable.
Sub-processor list
Up-to-date list + 30-day notice on changes.