Compliance

GDPR Compliance Statement

This page is maintained by AI Stack UK to answer common security and privacy questions about our platform. It is not an independent certification.

Lawful basis

We process personal data on the basis of legitimate interest (running and improving the service) and contract performance (delivering paid features).

Zero training on customer data

Documents you upload for analysis are strictly confidential and are never used to train AI models. Files are processed in-memory and purged immediately after analysis.

Encryption

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Data Processing Addendum

A UK GDPR-aligned DPA is available on request for paid plans. Email contact@aistackuk.com.

Your rights

You may access, rectify, erase, restrict or port your data at any time. Email us to exercise these rights.