Privacy policy

DigiMindSphere operates EU AI Act Info (euaiactinfo.com, also called AI Compliance OS) and is the controller for the personal data described here. Contact: info@digimindsphere.com.

This policy covers the website, the web app and the EU AI Act Info mobile apps for Android and iOS, which are published on Google Play and the App Store by Humaniti AI Solutions EOOD.

Account data. Your work email, a salted hash of your password and your company name, to run your account (performance of a contract).

Content you add. Documents, policies, and the organisational records you enter (people, suppliers, AI systems, incidents). You decide what is published on your trust center; nothing is public until you press Publish. Processed on your instructions.

Connector evidence. Read-only checks against systems you connect (for example whether multi-factor authentication is enforced), stored as evidence records. Processed on your instructions.

Trust-center visitors. When someone asks for access to your trust center, their name, email address, company, and the times they verified their email and accepted an NDA. Your organisation sees these in the web app and the mobile app, and each request is recorded in the audit log. Processed on your organisation’s instructions.

Contact form. Name, email, company and message, to answer you (legitimate interest in responding to enquiries). Kept until the enquiry is closed.

Technical data. Server logs with IP address and request details for security and error diagnosis, retained briefly by our hosting provider.

The apps collect only what the service needs: the email address and password you sign in with, your user and organisation identifiers, and the records you create in them, such as an incident’s description. Your password is sent over HTTPS to sign you in and is never stored on the phone.

The session tokens that keep you signed in are held in the platform’s secure storage — the iOS Keychain, or on Android storage encrypted with a key held in the Android Keystore — and are erased when you sign out.

The apps request no access to your location, contacts, photos, files, camera or microphone. They contain no advertising or analytics software, do not track you across other apps or websites, and do not currently collect a push-notification token.

We do not sell personal data and do not share it with third parties for their own purposes. The processors below handle it only on our instructions, to run the service.

All traffic between the apps, the website and our servers is encrypted in transit with HTTPS. Passwords are stored only as salted hashes. Each organisation’s records are visible only to that organisation’s accounts, and the audit trail is append-only so that no one can quietly alter it. Security.

One session cookie when you sign in (HTTP-only, same-site), and one that remembers the language you chose. No advertising or analytics cookies. Your theme preference is stored in your browser, not sent to us.

Database: Supabase, hosted in Frankfurt, Germany (AWS eu-central-1). Application hosting: Vercel, currently serving from the United States (US East). Contact-form email delivery: Resend, where configured.

Where data leaves the EU, transfers rely on the processor’s standard contractual clauses.

Access, rectification, erasure, restriction, portability and objection under the GDPR, and the right to lodge a complaint with a supervisory authority. Write to info@digimindsphere.com. Deleting your account deletes your content, except the audit trail described under Retention; published trust-center pages are unpublished at the same time. Account deletion.

Account and content data for as long as the account exists. Audit and evidence history permanently, because it is the point of the product: the audit log is append-only and keeps, for each action, the email address of the account that acted, the time, and the title and type of the record involved, and it survives account deletion. Contact-form messages until the enquiry is resolved.

We update this notice when the processing changes and show the date above.