Skip to content
How it works
Trust
Resources
About
FAQ
Book a demo

Enterprise security. Zero complexity.

We protect your company's information with documented security measures and transparent data handling.

Visit our Trust Center (opens in a new tab)
  • ISO 27001:2022 listed on our Trust Center

  • GDPR terms in our agreement

  • Main infrastructure in Europe tenant-isolated

  • Encryption at rest and in transit

  • No AI training on your data, by contract

ISO/IEC 27001:2022 certified badge

Trust Center

Data processing agreement

  • No AI model training on your data
  • Encryption
  • Customer isolation
  • Penetration tests
Subprocessor list

Mailbox connection

Access
Read-only
Sends, deletes or changes your email
Never

Read-only access to your mailbox

Where your data is processed

Our main infrastructure runs in Europe and is tenant-isolated. The full subprocessor list, AI model providers included, is in our data processing agreement.

  1. Customer interactions

  2. Main infrastructure

    Subprocessors

  3. Your CRM

See our subprocessor list

What our agreement provides

The terms below come from our data processing agreement. The agreement you sign sets your terms.

Data processing agreement

  • No AI model training on your data

    “Customer’s Personal Data and confidential information shall never be used to train, retrain, or fine-tune any foundational or third-party Large Language Models.”

  • Zero data retention at AI providers

    Third-party AI services are used under zero data retention agreements.

  • Encryption

    Data is encrypted with TLS 1.2 or higher in transit and AES-256 at rest.

  • Customer isolation

    Workloads run on private nodes in a managed Kubernetes environment inside a non-public network.

  • Deadlines

    A breach notice within 48 hours, 15 days’ notice before a new subprocessor and one working day to remove a user on request.

  • GDPR terms in our data processing agreement

    The data processing agreement sets out how Syntiqa processes personal data for a customer.

  • Penetration tests

    Regular third-party penetration tests, with fixes in 24 hours (critical), 7 days (high), 14 days (medium) and 90 days (low).

  • Production database access restricted

  • Production network access restricted

  • Data encryption

  • Log management and auditability

  • Risk assessments performed at least annually

Controls your security team can check

Read our documents and subprocessor list

SyntiqaMain infrastructure
in Europe

Your mailboxRead-only access

Your CRM

AI model providers

  • Zero data retention at AI providers
  • No AI model training on your data

Bring your security team to the demo