Security and privacy FAQ.Compliance made boring.
GDPR, data residency, SSO, penetration testing and the subprocessors involved.
Where does the data live?
European cloud infrastructure with data residency inside the EU by default. The operational database and all backups stay in the region you select at onboarding.
Are you GDPR-compliant?
Yes. We act as data processor for customer data and provide a standard DPA with subprocessor list, audit rights and breach notification commitments. Data subject requests flow through the customer.
Do you hold security certifications?
Yes, we are ISO 27001 certified and undergo annual penetration testing by an independent firm. Reports are available under NDA.
How is data encrypted?
TLS 1.3 in transit, AES-256 at rest. Sensor-to-cloud traffic is encrypted in transit; platform API connections use TLS 1.3.
Can we self-host?
Yes, enterprise customers can run RoomAlyzer on their own infrastructure (Kubernetes or managed EKS/AKS). We maintain the Helm charts and provide the same support coverage as the hosted platform.
Didn't find your answer?
Ask us directly: every question gets turned into future FAQ content.