Your data, sovereign by design.
KS-Agents handles HR data that is, by definition, sensitive: personality scores, exit interviews, peer feedback, skill gaps. We treat it as such. This page documents every architectural choice, every legal framework we comply with, and the limits we don't yet meet — so you can evaluate fit before you sign.
Six commitments we don't bend.
These are not marketing slogans. Each principle below maps to a specific architectural or contractual choice. Where we can't meet a principle yet, you'll find it in the honest-limits section at the end.
Data sovereignty first
Your proprietary content — interview transcripts, survey responses, knowledge assets — is logically isolated per app and tenant. We do not pool customer data into shared corpora.
No training on private data
We do not train our public models on your private workspace. LLM providers (OpenAI, Google Gemini, OpenRouter) operate under the no-training data policies of their enterprise plans.
Encryption at rest and in transit
AES-256 at rest for all sensitive storage. TLS 1.2+ in transit. Object storage credentials rotated; secrets never committed to source control.
Right to delete & export
GDPR Article 15 (access), 17 (erasure), 20 (portability) supported via self-service in-app plus a documented escalation path through our Data Protection Officer.
Auditable sub-processors
A public, version-tracked list of every sub-processor we use, where they store data, and what they do. Notifications when the list changes.
EU-only processing on request
For European customers requiring full EU residency, we route AI workloads through EU regions. Configured per app.
Where we stand. Where we're going.
We split certifications into three states: live (in production today, audited internally), available (paperwork on request — DPA, SCC, etc.), and roadmap (committed, with target date).
| Framework | Status | Notes |
|---|---|---|
| GDPR (EU 2016/679) | Live | Full lawful basis mapping per processing activity. DPO appointed. Subject rights endpoints in product. Records of processing maintained. |
| EU AI Act | Live | Our HR use cases are classified high-risk under Annex III. Risk management system, human-oversight controls, data governance, technical documentation per Title III, Chapter 2. |
| AES-256 at rest | Live | Database encryption at rest. Object storage (Cloudflare R2) encrypts data at rest with provider-managed keys. Application secrets encrypted in transit and stored in a secrets manager. |
| DPA (Data Processing Agreement) | Available | Standard DPA available pre-contract. SCCs (Standard Contractual Clauses) included for any non-EU transfers explicitly approved by you. |
| EU data residency | Available | Hetzner Falkenstein (Germany) for primary infrastructure. EU-only LLM routing on request. Full architecture → |
| ISO 27001 | Roadmap | Information Security Management System (ISMS) being formalised. Target certification: 2027. Gap assessment in progress. Until then, controls follow the ISO 27001 framework internally without third-party audit. |
| SOC 2 Type II | Roadmap | Scoped after ISO 27001 — US customers can request a security questionnaire (Cyber Essentials Plus / HECVAT) in the interim. |
Five layers, one boundary.
A simplified map of where your data lives and what protects it. Full architecture diagrams shared under NDA on request.
openai_eu, azure_sweden, google_vertex (europe-west4). No customer data persisted by providers under enterprise terms.Who else touches your data — and where.
A subset of our active sub-processors below; the full versioned list is maintained on the dedicated page. We notify customers in advance of additions, with the right to object.
Hetzner
Cloudflare R2
OpenAI
Google Vertex AI
Azure OpenAI
Stripe
The honest list of limits and timelines.
Every vendor's trust page lists what they have. We also list what we don't have — with a target where we're working on it. This is how procurement teams should evaluate vendors anyway.
Read the legal text. Skip the legalese.
Each document is plain-English at the top, with the full legal version below. Send your security or procurement team straight here.
Hand this page to your security team. Then book a call.
If your CISO or procurement team has questions our public documentation can't answer — pen test results, ISMS controls, custom DPA addenda — we walk through them in a 30-minute call under NDA.
