GDPR transparency

Our roles

Product privacy controls

• Content capture is disabled by default. Prompts and responses are excluded from logs, metrics, traces, analytics and audit events.
• Optional capture is explicit and scoped. An authorized administrator can enable prompt or response capture for an organization or project.
• Captured content is encrypted. The gateway encrypts the bounded value with AES-256-GCM before it enters the asynchronous storage queue.
• Retention is bounded. Available content retention presets are 1 day, 3 days, 7 days, 30 days, 90 days. Operational analytics are retained for Starter: 5 days; Pro: 30 days; Enterprise: Custom.
• Tenant deletion fails closed. An owner request stops access and schedules live purge after 90 days. Active holds, paid periods, open invoices or failed dependencies postpone erasure; rotating database backups expire seven days after creation.
• Individual rights are handled separately. The normal tenant-termination schedule is not treated as the automatic response to an erasure request. Aixy uses a reviewed, case-specific access, export and erasure workflow at its current scale, including a documented decision where retained security evidence cannot be selectively altered.
• Primary regional infrastructure is in Frankfurt. Aixy-operated AWS services remain in eu-central-1. The destination of a model request also depends on the provider and region selected by the customer.
• Access is tenant scoped. Organization and project permissions, encrypted provider credentials, project API keys and audit evidence restrict and record control-plane access.

Documents available

What the badge does not mean

GDPR compliance is a continuing legal and operational responsibility. The badge does not mean that Aixy has been certified under Articles 42 and 43, that a supervisory authority has approved the service, or that every customer use case automatically complies with the GDPR.

Customers remain responsible for their own purposes, legal bases, notices, instructions, data minimization and choice of model providers. Aixy supplies controls and information to support that work.