Our commitments to you
Everything your procurement, legal, or security team needs to evaluate us before signing. Privacy, compliance, technical security, and service status in a single, always up-to-date access point.
This is a courtesy translation provided for convenience. The Spanish version is the legally binding text.
Trust Center
We build every one of our solutions starting from three principles: treating your data with the same care as our own, being transparent about how we do it, and being able to prove it when you ask. The links below are the official source for each of these commitments.
Trust resources
| Commitment | Detail | Resource | Scope |
|---|---|---|---|
| Data privacy | How we collect, process, and protect your personal data. GDPR and LOPDGDD compliance, data subject rights, and privacy by design. | See Privacy Policy | GDPR |
| Technical security | Encryption in transit and at rest, per-tenant isolation, cryptographically verifiable audit logs, backups with the 3-2-1 rule, and monthly restore drills. | See security measures | Defense in depth |
| Legal compliance | Legal notice, terms of service, responsible AI policy, confidentiality, and intellectual property. All contractual documentation in one place. | See legal index | LSSI · GDPR · AI Act |
| Service status | Public page with the status of each component (API, panel, models and infrastructure). Optional subscription to incident alerts by email. | See public status | Uptime · Incidents |
| Data processors | Public list of sub-processors that process personal data on AIGiner's behalf (hosting, email, analytics, monitoring) and the countries where they operate. | See sub-processors | DPA transparency |
| Responsible AI policy | Ethical principles, human oversight, prohibitions (deepfakes, mass surveillance, electoral manipulation), and commitments to the European AI Act. | See AI policy | EU AI Act |
| Vulnerability reporting | Found a security flaw? Write to us. We respond within a maximum of 5 business days and work with you on a coordinated, responsible disclosure. | security@aiginer.com | Responsible Disclosure |
| Legal contact and audits | Procurement, due diligence, audit requests, or exercise of GDPR rights. Handled directly by the two founding partners: there is no data protection officer or designated compliance officer, and we are not required to appoint one. | legal@aiginer.com | Procurement-ready |
Fundamental guarantees
| Guarantee | What it means |
|---|---|
| European hosting | The application server, the database and the inference operate within the European Union, so the content the agents process does not leave it. Four ancillary processing activities do leave, and we declare them: transactional email, network metadata, payments and the support channel. All of them under the European Commission's Standard Contractual Clauses. The full list, with provider and location, is on the subprocessors page. |
| Cryptographic traceability | Our audit logs use an immutable SHA-256 hash chain. Any tampering is automatically detected. |
| Client data stays the client's | We never use one client's information to train models or to benefit another client. Strict per-tenant isolation. |
Does your legal team need an audit questionnaire?
We handle standard procurement questionnaires (CAIQ, SIG-Lite, equivalent formats) and requests for a custom DPA. We respond within a maximum of 5 business days.
Write to legal@aiginer.com