GDPR by design

We collect only the data a feature needs, define how long it is kept and make export and deletion part of the system rather than a manual task.

  • Data Processing Agreement with every client
  • EU-only hosting
  • Data minimisation, retention rules and deletion workflows

AI features that keep people in control

Our products use AI in practical ways — for example, an assistant that proposes actions a person has to approve before anything happens. We design AI features so that people stay in control, decisions can be traced and records are kept, in line with the EU AI Act, and we provide the information our clients need for their own assessments.

Access control and audit trails

Role-based access, single sign-on with Microsoft Entra ID and a record of who changed what and when. When an auditor asks, the answer is already in the system.

Open to audits

We are a young, small company, so we do not hold ISO 27001 certification. What we offer instead is transparency: we answer security questionnaires, document our controls and welcome audits by our clients.

Compliance is our own product area

ComplyCore, our training compliance platform, tracks mandatory training, renewals and audit evidence for operational teams. Building it taught us what auditors actually ask for, and we apply that to every project.

Built by CYAP

  • ComplyCore — Mandatory training, onboarding and renewal tracking for operational teams.
  • elearning.edu.pl — Business learning through decision scenarios, AI conversations and structured learning paths.

Frequently asked questions

Do you sign a Data Processing Agreement?

Yes, with every client.

Are you ISO 27001 certified?

No. We are a young, small company. We answer security questionnaires, document our controls and are open to audits by our clients.

Can you help us meet the EU AI Act?

We build AI features with human oversight, traceability and record-keeping, and provide the technical information you need for your own assessment. For legal interpretation we recommend your legal adviser.

Where is data stored?

In the European Union only.