Trust Centre
Trust Centre
How Evidia handles data, security, AI governance, and the legal instruments behind an EU-built meeting intelligence platform.
Transparency is a product feature for us. This centre collects the policies, registers, and disclosure channels in one place, and is honest about what is final versus still in review. Nothing here overclaims a certification we have not earned or a control we have not shipped.
Draft Draft documentation — pending company registration
These documents are working drafts. The legal entity (Evidia B.V.), its Chamber of Commerce (KVK) number, VAT number, and some operational details are not yet finalised. Once registration is complete and legal review concludes, every document here will be reissued as final. Until then, treat them as accurate descriptions of intent, not binding terms.
The page structure is built to go live unchanged the moment the documents are final. Last reviewed: 2026-03-29
Available now
Publish-safe summaries and disclosure channels backed by shipped controlsData Handling & Retention
AvailableData categories, access boundaries, and how retention is governed.
Cookie Policy
AvailableStrictly necessary cookies and your consent choices.
Security Reporting
AvailableResponsible-disclosure channel and what to expect when you report an issue.
AI Memory Governance
AvailableMemory scope controls, permissions, and grounded-retrieval safeguards.
How we earn trust
The posture behind every document in this centre.
Built and hosted in the EU
Customer data is stored and processed in infrastructure located in the European Union. Sub-processor use is disclosed and constrained by purpose.
Tenant isolation by construction
Multi-tenant PostgreSQL with row-level security, workspace-scoped memory retrieval, and append-only, hash-chained audit events.
Human oversight first
AI outputs are assistive. Transcription and analysis support — they do not replace — human judgement before any decision or sharing.
Evidence over claims
We publish what shipped controls support, and we mark everything else as in review or coming soon. No fabricated certifications.
Document register
Status-gated transparency for every document — including drafts and placeholders
Privacy & data handling
Data handling, processor disclosures, and privacy operations- Data Handling & Retention Available
Data categories, access boundaries, and how retention is governed.
- Privacy Policy In review
How we collect, use, and protect personal data, aligned to GDPR and AI-assisted processing.
- Sub-processor List In review
Third parties who process data on our behalf, with purpose and location.
- Cookie Policy Available
Strictly necessary cookies and your consent choices.
Legal
Contract and policy instruments- Terms and Conditions In review
Master service terms covering subscriptions, acceptable use, and liability boundaries.
- Data Processing Agreement In review
Article 28 GDPR processor terms and the sub-processor governance framework.
Security & operations
Operational security posture and disclosure channels- Security Reporting Available
Responsible-disclosure channel and what to expect when you report an issue.
- Security Architecture Coming soon
Technical and organisational controls for infrastructure, access, and incident response.
- Compliance Roadmap Coming soon
Status of certifications, policy milestones, and assurance artefacts.
AI & memory governance
AI memory and decision-support behaviour controls- AI Memory Governance Available
Memory scope controls, permissions, and grounded-retrieval safeguards.
- AI Disclosure and EU AI Act In review
Transparency on AI capabilities, limitations, human oversight, and user rights.
These pages are intentionally transparent In-review and coming-soon items are shown deliberately. They are withheld from final publication claims until legal, policy, and owner validation is complete.
Driving a certification forward
We have not yet obtained formal certification — and we won't claim otherwise. If your review depends on one of these, request it and we'll share our timeline and move it up the queue when demand is real.
SOC 2 Type II
Security, availability, and confidentiality controls audit. Common baseline for SaaS procurement.
ISO/IEC 27001
Information security management system certification. The control framework our architecture is already aligned to.
ISO/IEC 27701
Privacy information management extension to 27001. Relevant for processor/processor privacy obligations.
ISO/IEC 42001
AI management system standard. Pairs with our EU AI Act obligations for transparency-relevant AI.
EU AI Act conformity
Formal risk classification and conformity posture under Regulation (EU) 2024/1689 — currently in legal assessment.
Something else
NEN 7510, HIPAA, an internal security questionnaire, or a customer-specific requirement.
Need something specific, or a certification we don't list yet?
Tell us what your security or procurement review requires. If a framework matters to your decision, we'll tell you honestly where it sits on our roadmap — and prioritise it if enough teams ask.