Your data, your jurisdiction, your control.
EU-hosted by design. GDPR-aligned by default. Every product across the SLAtech ecosystem follows the same data principles — no exceptions for any vertical.
Four pillars, four promises.
The basics, done properly. No security theatre.
Where your data lives
EU-hosted infrastructure. Your primary database, vector store, and backups all reside in EU data centers under GDPR. AI inference is performed by third-party services that do not retain or train on your content; only the specific question text is transmitted for inference. Customer documents and conversation history stay within our EU boundary.
Encryption everywhere
TLS 1.3 in transit. At-rest data on encrypted storage volumes. Sensitive credentials such as bot tokens use application-level encryption with EU-managed keys. API keys hashed before storage.
No scraping, no resale
Your customer conversations are not training data for general AI models. Not sold. Not shared with third parties. Period.
Data subject rights
Customers can request access, export, or deletion of their data through you, the operator. We give you the tools to comply.
A short list of things we'll never do with your data.
Most policies tell you what a company will do. The interesting list is the other one.
- Your conversations train your bot only — not anyone else's
- No data resale to advertisers, brokers, or AI training datasets
- No tracking pixels embedded in your visitor-facing widget
- No marketing emails to your end-users from us — ever
- No surprise subprocessors: we disclose what we use on request
Conversations are deleted on request, and after a subscription ends. We don't keep what we don't need.
Documentation for the people who need it.
SLAtech LTD is a registered Israeli company operating under EU data protection standards. Our infrastructure is EU-hosted, our processing is GDPR-aligned, and we're set up to support European clients without surprises.
For procurement, security review, or DPA paperwork, contact us directly. We'll send the documentation that fits your situation — DPA, security overview, processing description, or subprocessor list.
For end-user data subject requests (access, export, deletion), our products give you the tools to fulfill them as data controller. We act as processor on your behalf.
Trust earned, not claimed.
Try a product, review the integration, see how data flows. The shortest path is talking to us directly.