Security and data protection

All data is stored within the EU

Our production environment runs on Oracle Cloud Infrastructure with servers in Sweden and Germany. Images and files are stored on Google Cloud Platform. All environments are within the EU and covered by EU data protection rules.

Data staying within the union means you avoid handling third-country transfers for the storage itself, and you get lower latency in the Nordic market.

Certifications at our infrastructure provider

Oracle Cloud Infrastructure is certified to ISO 27001 and meets SOC 2, which means documented controls for security, availability, confidentiality and integrity in the infrastructure we build on.

The certifications apply to the infrastructure provider. ZyndraAI is not itself ISO 27001 certified at present.

Encryption

At rest

All data is encrypted when stored on our servers.

In transit

All traffic between your browser and our servers is encrypted with TLS. Connections are made exclusively over HTTPS.

Access and permissions

We apply role-based access control and give only authorised staff access to customer data, and only to the extent the task requires.

Two-factor authentication is available for all accounts and we recommend enabling it for every user.

Our infrastructure is protected by firewalls that control inbound and outbound traffic according to defined rules.

Retention for conversations – you decide

You control how long your conversations are kept. The default setting is twelve months, but you can set a shorter period so data is deleted automatically earlier. You can also delete individual conversations at any time directly in the platform.

That makes it easy to meet your own deletion policy and to handle an erasure request from an end customer without contacting us.

Deletion of data

You can delete conversations and knowledge base content yourself in the platform. If you need to delete something else, or want deletion confirmed in writing, create a support case or email hello@zyndra.ai. We handle the request and delete the data, except for what we are required by law to retain.

Operational status

Current availability and any incidents are published continuously at zyndraai.instatus.com.

Related documents

See also our list of sub-processors and how your data is used in AI answers.