Built in the EU. Your data stays in the EU.
All customer data is processed and stored exclusively within the European Union. It never leaves EU jurisdiction, is never used to train our models, and is used solely to run your assessments.
Encryption everywhere
Customer data is encrypted with AES-256 at rest and TLS 1.3 in transit. Your audit data is protected at every step.
Strict access controls
Customer data is processed under strict access controls and used only to perform your assessments.
Immutable audit trail
Every action on the platform is logged with tamper-proof timestamps.
Never used for training
Customer data is never used to train our models. It is used solely to run your assessments.
You own your data
You retain all rights, title, and interest in your data and the audit findings derived from it.
Privacy by design
Built from the ground up with privacy by design across every layer of the platform.
How your data flows
You provide evidence
Upload documentation directly or connect the enterprise systems that already hold technical, organisational, and operational evidence.
Data is secured in the EU
Everything is encrypted in transit and at rest, and processed and stored exclusively within the European Union.
Assessment runs on your data only
The platform assesses your evidence against the EU AI Act requirement graph, solely for the purpose of your assessments.
Results stay yours
Requirement-linked results remain in your organisation’s account, reviewable and exportable at any time.
Data protection documents
Our Data Processing Addendum is published on this site. The current list of subprocessors is available on request. Email contact@progressio.ai and we will share it as part of your security review.
Vulnerability disclosure
If you believe you have found a security issue in the platform, report it to security@progressio.ai. We review every report.
Questions about security?
We are happy to walk your security and legal teams through the platform.