Security
How we protect your data.
GDPR
Compliant
EU AI Act
Compliant
ISO 27001
In progress
Hosting and data location
- The app and database are hosted on Render in Frankfurt, Germany.
- Files are stored with Cloudflare in the EU.
- Some services, including AI models, process data outside the EU.
AI and your data
- Voltplot's assistant uses models from OpenAI and Anthropic.
- These providers may process data outside the EU, including in the USA.
- On request, we limit your organisation to OpenAI models run by Microsoft Azure in the EU.
- We do not train AI models on your data. Our AI providers do not use your data to train their models.
Encryption
- All connections to Voltplot use HTTPS with TLS 1.2 or newer.
- Our hosting providers encrypt data at rest with AES-256.
Access control
- Accounts are available by invitation only.
- Sign in with Google or Microsoft to use your company's login policy.
- Production access is restricted to the people who operate the service.
Data isolation
- Each organisation's data is logically separated. No organisation can access another's data.
Backups
- The production database is backed up daily.
- Backups are encrypted and stored in the EU.
- We regularly test backup restoration.
Development and monitoring
- Every change passes automated tests before release.
- Dependencies are checked for known vulnerabilities daily.
- Security updates are applied promptly.
- We monitor our systems for errors and outages.
Data export and deletion
- You can delete your account in the app.
- Contact us to export or delete your organisation's data.
Subprocessors
Our subprocessors, what they do and where they process customer data.
Render
App servers and database
Frankfurt, Germany
Cloudflare
Website, network protection, file storage and processing
Files: EU. Network: worldwide
Auth0 (Okta)
Sign-in
EU
Backup servers
Backups and maintenance
EU
OpenAI
AI models
Not limited to a region
Microsoft Azure
AI models for organisations limited to the EU
EU Data Boundary
Anthropic
AI models
Stored in the USA. Processed in the USA, Europe, Asia or Australia
Vercel
AI gateway
Worldwide
Mistral
Text extraction from documents and images
EU
Exa
Web search by the assistant
USA
Google
Address search
Worldwide
Esri
Map imagery
Worldwide, including the USA
Mapbox
Maps and place search
USA
Cesium
3D terrain
USA
Resend
Email
USA
Attio
Customer management
EU
PostHog
Product analytics
Frankfurt, Germany
Sentry
Error monitoring
Frankfurt, Germany
Pydantic Logfire
Logs and traces
Netherlands
Security contact
Report vulnerabilities to [email protected] with steps to reproduce them. We answer security questionnaires and provide a data processing agreement on request.