Trust center

What is true today.

This page is an inventory, not a wishlist. Every claim below is labeled as live in the product, in progress, or planned. We update the page when a status changes.

Compliance status

In progress

GDPR consent flow

Consent and review-before-publish are live. Optional public professional research has its own unchecked opt-in; leaving it unchecked means no person-specific lookup. Export and deletion requests enter a durable queue and are fulfilled through a documented manual privacy process while automated fulfilment is being built.

Live

EU data residency

Application data is stored in EU data centers and the voice service runs in EU regions. Model providers are listed openly under subprocessors.

In progress

SOC 2 Type II

Readiness work is underway. You will not see a badge anywhere on this site until the report exists.

Planned

ISO 27001

Scoped to follow the SOC 2 work. We update the status here only when it changes.

Security practices

✓
Row-level security
Customer data tables use row-level policies and explicit customer filters. Administrative metadata is limited to manager, administrator and owner roles.
✓
Role-scoped access
Interviews are visible only to their assignee until published. Administrative surfaces require administrative roles.
✓
Encrypted transport
All traffic between your browser, our servers and the voice service is encrypted in transit.
✓
Rate-limited APIs
Sign-in and API endpoints are rate-limited to blunt abuse and credential stuffing.
✓
Consent-gated publishing
Nothing an employee says in an interview reaches their organization until they have reviewed and approved the transcript.

Subprocessors

These providers process data so AiAx can run. Each receives the minimum it needs for its purpose.

ProviderPurposeRegion

SupabaseDatabase, authentication and file storageEU

VercelWeb application hostingEU / global edge

Google Cloud RunVoice service hostingEU

OpenAISpeech and language processing during live interviews and transcript analysisGlobal

Google GeminiFallback speech processing for live interviews (not active by default)Global

OpenRouter (xAI Grok)Company Brain answers, post-interview review, and source-linked synthesis for optional public company and professional researchGlobal

AnthropicOptional image and screenshot analysisGlobal

ResendTransactional email and calendar invitationsEU / global infrastructure

TavilyPublic-source discovery for onboarding and demos; after explicit person-research consent, it receives name, company and submitted role as search hintsGlobal

FirecrawlExtraction of public pages and bounded public excerpts found for onboarding and demos, including optional consented professional researchGlobal

Upstash RedisAbuse prevention and rate limiting using short-lived technical identifiersEU

Read the full Privacy Policy and Terms of Service.