Privacy Policy

The ISMS Copilot Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered compliance platform.

Key Points

• All data stored in the EU: Your conversation history and account data are hosted in Frankfurt, Germany — never transferred outside the EU for storage.

• No AI training on your data: We never use your conversations, uploaded documents, or queries to train AI models.

• User-controlled retention: Set your own data retention period (1 day to 7 years, or keep forever) with automatic deletion of expired content.

• Advanced Data Protection available: Enable EU-only AI processing with zero provider data retention for maximum privacy.

• GDPR rights supported: Access, export, and delete your data through Settings → Data Protection.

Canonical Document

For the complete, legally binding Privacy Policy, visit our Trust Center:

Related Documentation

• Data Processing Agreement (DPA)

• Register of Processing Activities (RoPA)

• Data Privacy & GDPR Compliance