Compliance posture at a glance.
One page. Every artifact a procurement or DPO team asks for. If you don't see something, ask — we ship it.
Updated:
What we have.
Artifact library.
Security
Hosting, encryption, secret management, incident response, breach notification.
Data Processing Agreement
GDPR Art. 28 controller-processor terms. EU SCCs. Counter-signed within 5 business days.
Subprocessor list
Cloudflare, Polar, Brevo, Anthropic, OpenAI, Google, OpenRouter, GitHub, Supabase.
Privacy Policy
GDPR Art. 13 disclosures. What we collect, retention, your rights.
Terms of Service
Usage rules, IP, liability cap, EU jurisdiction.
Cookie Policy
Cloudflare _cfuvid functional cookie plus consent-gated PostHog analytics (EU region).
Acceptable Use Policy
Prohibited use, AI-specific rules, per-product carve-outs.
Imprint
EU Impressumspflicht. Legal entity, contact, EU dispute resolution.
OpenStore as proof.
Our 320-star, 120-fork public OSS at github.com/AleksNeStu/ai-real-estate-assistant is the running version of the same architectural primitives we ship in PropVector AI. The architecture is not hidden behind a wall.
Author's GitHub profile Author's LinkedIn profile
The same posture is applied to client work: if your systems fall inside the scope of Regulation (EU) 2024/1689, the EU AI Act compliance work classifies the risk and builds the documentation trail behind it.
How a testimonial gets published.
Consent capture. Every testimonial requires a signed consent record before publication. Legal basis: GDPR Art. 6(1)(a) (consent) and EU AI Act Art. 50(2) (transparency). Synthetic, paraphrased, or impersonated quotes are not accepted. Read the privacy policy.