Security & data sovereignty

Security is a core product feature. Reseller data contains margins, velocities, and channel strategies that are genuinely confidential, and we treat it that way.

​

The No-Train guarantee

Your data is processed in isolated sessions via the Anthropic enterprise API. It is never used to train AI models, ours or our providers’. When you send a query, relevant data is retrieved, anonymized where possible, and sent to the model within a transient context window. It is not retained by the model provider.

​

At a glance

​

European data residency

All data is hosted in EU-based data centers (DigitalOcean Germany and Netherlands) for full GDPR compliance. TaskifAI is headquartered in Malmö, Sweden.

​

Subprocessors

​

Compliance & certifications

TaskifAI is GDPR-compliant by design: all data is hosted in the EU, and we execute a Data Processing Agreement with every customer. We are not ourselves SOC 2 or ISO 27001 certified. Instead, we build on infrastructure providers who are. DigitalOcean, Supabase, and Anthropic each maintain certifications such as SOC 2 Type II and ISO 27001 for the services we run on, so your data sits on audited, independently certified infrastructure.

​

Need our DPA or compliance documents?

We share our Data Processing Agreement and our subprocessors’ current compliance reports (SOC 2 Type II, ISO 27001) on request. Your legal and security teams can reach us directly.