Security

Operated in Sweden

Application, databases, backups and DNS run with Swedish providers in Swedish data centres. Support is handled by our team in Västerås.

Encryption

TLS 1.3 in transit. AES-256 at rest with keys rotated quarterly. Vault keys are stored separately from application data and never leave Swedish infrastructure.

The Vault model

Personal data is replaced with tokens before it is sent to language models or external systems. Tokens have a type, a lifetime and a scope; only a caller with resolve permission can look up a value, and every lookup is logged.

→ "Call Anna Lindqvist on 070-123 45 67"
← "Call [name:8jd83j9d3] on [phone:q7x2m0d1k]"

Report a vulnerability

Write to [email protected]. We confirm within 2 working days and respond with a timeline within 7. We take no legal action against responsible disclosure.