Skip to main content
Arelis AI

Trust & security

Your AI governance records deserve the same care you give them

AIMS holds sensitive information about how your organisation uses AI. Here is how we protect it, in the same terms our contracts use.

Measures

How we protect your data

  • Data stored in the EEA

    Primary customer data is stored in the European Economic Area. Our hosting provider is Google Cloud.

  • Data processing agreement

    Where your content includes personal data, we sign our data processing agreement under Art. 28 GDPR as part of the contract.

  • Encryption

    Data is encrypted in transit with TLS 1.3 and at rest with AES-256.

  • Access control

    Role-based access control inside AIMS and Arelis Hub, so people see only the systems and records they are responsible for.

  • Security programme

    Technical and organisational measures under Art. 32 GDPR, ISO 27001-aligned policies and annual penetration tests.

  • Sub-processors

    Sub-processors are named in our privacy policy, and transfers outside the EEA rely on adequacy decisions or Standard Contractual Clauses.

The binding commitments are in our Terms of Service and Privacy Policy.

Security FAQ

Where is our data stored?
Arelis stores primary customer data in the European Economic Area, hosted on Google Cloud. Details are set out in our data processing agreement.
Do you use our data to train AI models?
Your governance records are your data. If you route model calls through Arelis Hub, the model provider you select processes those requests under its own terms, which is why providers are listed as sub-processors in our privacy policy. Ask us for the details for your configuration.
Can we get a copy of the DPA and security documentation?
Yes. Contact us and we will share the data processing agreement and our security overview as part of your evaluation.
Which security standards do you follow?
Our security policies are aligned with ISO 27001. Ask us for our security overview, which describes our controls and current certification status.

Need our security documentation?

We share the DPA and security overview with teams evaluating AIMS.

Contact us