GDPR
GDPR and OdysseyGPT
Customer data is hosted and processed in the United States. We don't offer EU or UK data residency today. Here is what that means for personal data in your documents.
Last reviewed:
Overview
GDPR sets rules for processing the personal data of people in the EU. UK GDPR does the same in the UK. Organisations need a lawful basis, proper security, and a way to honour data subject rights. Customer data is hosted and processed in the United States. We don't offer EU or UK data residency today. So personal data in your documents is transferred to the US. The transfer terms belong in your data processing agreement with us.
Key Takeaways
- How OdysseyGPT supports a GDPR programme, and why personal data is processed in the US today.
- Customer data is hosted and processed in the United States. We don't offer EU or UK data residency today. OdysseyGPT is hosted on Render in the United States (US-East, Virginia).
- Customer data is hosted and processed in the United States. We don't offer EU or UK data residency today.
Key requirements
- Where data is processed: Customer data is hosted and processed in the United States. We don't offer EU or UK data residency today. OdysseyGPT is hosted on Render in the United States (US-East, Virginia).
- Data minimisation: Upload only the documents a review needs. Reviews pull out the fields you ask for. They do not copy whole documents into new systems.
- Right to erasure: When you delete a document, we remove it for good. That includes its extracted content and its stored original file.
- Data subject access requests: Search all the documents in a workspace to find where a person's data appears. Each answer is cited.
- Security of processing: Data is encrypted in transit with HTTPS (TLS). Our hosting and storage providers encrypt data at rest. Cloudflare R2 encrypts every stored file with AES-256. Workspace roles (Owner, Admin, Member and Guest) control who can see and change what.
Relevant document types
- Customer correspondence
- HR documents
- Contracts and agreements
- Support tickets
Frequently asked questions
Does OdysseyGPT offer EU data residency?
No. Customer data is hosted and processed in the United States. We don't offer EU or UK data residency today.
Where is data stored for EU and UK customers?
OdysseyGPT is hosted on Render in the United States (US-East, Virginia). Uploaded files are stored in Cloudflare R2. Personal data is transferred to the US under the terms of your data processing agreement.
Can we delete documents to honour an erasure request?
Yes. When you delete a document, we remove it for good. That includes its extracted content and its stored original file.
Is our data used to train AI models?
We do not train or fine-tune AI models on customer data.