Privacy Policy

Conforma ("we", "us") provides software that helps organisations assess and document their compliance with the EU AI Act (Regulation (EU) 2024/1689). This policy explains what personal data we process and the choices you have. We are committed to processing personal data lawfully under the General Data Protection Regulation (GDPR).

• Account & contact data — name, work email, company, and role, when you create an account or request a demo.
• Product data — the AI-system records, classifications and documents you create in Conforma. This is your content; we process it only to provide the service.
• Usage & technical data — aggregated, scrubbed telemetry (e.g. error events) used to keep the service reliable.

We process personal data to provide and secure the service, respond to enquiries, and meet our legal obligations. We do not sell personal data, and we do not use your product content to train third-party AI models.

Depending on the context, we rely on the performance of a contract (providing the service), our legitimate interests (securing and improving the service), your consent (e.g. marketing), and compliance with legal obligations.

Enterprise customer data is hosted in EU regions. We retain personal data only as long as needed to provide the service or as required by law, and delete or anonymise it on request. See our Security page for technical detail.

We use a small, vetted set of sub-processors bound by data-protection terms consistent with this policy. The current list is published on our Security page.

Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. To exercise any of these, contact us at privacy@conforma.eu. You also have the right to lodge a complaint with your local supervisory authority.

Questions about this policy or your data? Email privacy@conforma.eu.