Built so your data never has to leave the EU.
The application and database run in Fly.io region fra — Frankfurt. Your extract is processed in memory and discarded in the same request. What we keep, and who helps us run the service, is published below.
Four commitments, built into the product
Zero Data Retention
Your raw extract is processed in memory and discarded after each run. We keep only the result — scores, counts and per-finding evidence — never your records.
Allowlist for AI
Only a fixed allowlist of non-identifying fields reaches the AI provider — never VAT/tax IDs, email, phone, bank/IBAN, credit limits or payment terms. A model must pass an evaluation gate first.
Recommend-only
BeyondCore never writes back to your systems. It suggests; a person approves. Every decision is recorded for audit.
Deploy your way
For full residency with no external AI sub-processor, run BeyondCore in your own cloud or on-premise with your own AI provider.
Controls your security team will ask about
Accounts and access
Passwords stored only as PBKDF2 hashes. A password change ends every other session. Owners and admins manage roles; people who leave are deactivated, keeping the audit trail.
Separation between customers
Every record belongs to one organization and every request is checked against it. One customer can never reach another's data.
Transport and browser
HTTPS everywhere with HSTS, a strict content-security policy, no third-party scripts and no cookies. Single sign-on (OIDC) on the Business plan.
Support access
When we help you, we see your account read-only, for one hour, and every such view is logged on your account.
Monitoring
Errors are reported to an EU-hosted service, scrubbed of request bodies, uploads, tokens and identities.
Your rights
Access, correction, deletion and export of your data — see the Privacy Policy for how to use them.
Who helps us run the service
Every third party that may process customer data on our behalf. Kept current; the full list also lives at /legal/subprocessors.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Fly.io | Hosting, compute, managed PostgreSQL | Assessment results & findings. Never the raw extract. | EU — Frankfurt |
| Anthropic | AI Engine (semantic analysis) | Allowlisted non-identifying fields only. Not used for training; kept by Anthropic only for a limited period under its commercial terms. | US |
| Resend | Transactional email (confirmation, password reset, invitations, contact form) | Recipient address & message (links, names). Not master data. | EU — Ireland |
| Sentry | Error monitoring | Technical error data only — no request bodies, uploads, cookies or user ids. | EU — Frankfurt |
A DPA, ready to send
You are the controller, BeyondCore is the processor. It reflects how we actually process data — zero data retention, the AI allowlist, EU hosting, and standard contractual clauses for the AI sub-processor.