Trust centre

Controls for project records, commercial positions and approvals

A procurement-review starting point. Contractual commitments and the production subprocessor schedule control where they differ from this summary.

Security

• Tenant-scoped database policies, server-side capability checks and approvals that cannot be self-signed.
• Encryption in transit and at rest, hashed sessions, bounded inputs, audit events, secret-safe logs and migration drift checks.
• AI may draft or recommend; it cannot commit a project action or approve its own material decision.

Subprocessors and AI providers

Railway hosts the application; Neon hosts PostgreSQL; Microsoft 365 handles configured operational email; Stripe processes payment when enabled; and configured AI providers support approved drafting or analysis. The production schedule names the exact provider, purpose, region and transfer safeguard before customer data is sent. Veystrum does not use customer project records to train models.

Retention and location

Project and audit records follow the contracted retention schedule, legal holds and customer deletion workflow. Hosting/database region and cross-border transfer mechanism are agreed for the customer environment rather than inferred from visitor location.

DPA and data protection

The DPA is a draft for legal review and is not published. Request it, the subprocessor schedule or a security review at [email protected]. Data-protection requests use the same address.