Security & compliance
Certifications and standards
ISO27001 certification (Dropsolid NV / Dropsolid AI NV, registration 30050644 ISMS22). Aligned with EU AI Act obligations. GDPR-native architecture. Standard DPA available. Subprocessor disclosure on request.
Audit traceability
Every AI interaction produces a trace export covering the question asked, the passages retrieved, the answer generated, the citations included, and the model used. EPSO's deployment is audited against the EU's information-governance requirements.
Penetration testing
Annual third-party penetration testing. Customer-specific testing available on request.
Documentation
Full data-processing and security documentation at support.dropsolid.io, including AI Gateway data-processing-and-security pages.