One place for procurement, security and legal teams to verify how validant.ai operates: our compliance posture, contracting documents, operational security and certification roadmap. Live where it can be, available on request where it must be.
GDPR Art. 13/14 notice with revFADP. Plain-language summary, full detail, your rights.
Full registry of every cookie we set, the legal basis for each, and live consent controls.
Our public AI policy: EU AI Act risk classification, lifecycle controls, no-training guarantee.
Conformance statement under the European Accessibility Act and WCAG 2.2 AA, with known gaps.
The master rules for using validant.ai. Acceptable use, IP, liability caps, governing law.
Our standard GDPR Art. 28 / revFADP Art. 9 DPA. Includes SCCs and the Swiss addendum.
Every service provider with access to customer data, their purpose, location and transfer mechanism.
Publisher, commercial register, authorised representation, dispute resolution.
Safe-harbour policy for researchers, rules of engagement, and our security practices.
Machine-readable contact under RFC 9116. Auto-discovery by scanners and bug-bounty platforms.
Real-time and historical uptime for validant.ai and the platform. Incident log.
Executive summary of our latest third-party penetration test. NDA on request.
Information security management system. Implementation underway, audit planned 2027.
Service organisation controls for security, availability, confidentiality. 2027 target.
AI management system. Operationalising our internal AI policy as a certifiable system.