Compliance

An AI assistant that’s compliant by design

GDPR, the AI Act and data protection: IKIbrain is built to work within European rules, so you can focus on your customers.

01

GDPR

The General Data Protection Regulation is our main frame of reference: clear roles, guaranteed rights, and documentation ready for you.

Clear roles: controller and processor

You remain the controller of the data collected through the assistant; IKIbrain acts as data processor under Article 28 GDPR.

Data Processing Agreement (DPA)

A clear, ready-to-sign DPA that defines technical measures, purposes and responsibilities for data processing.

Data subject rights

Access, rectification and deletion of conversations and collected contacts: managed directly from your dashboard, without delays.

Configurable retention

You decide how long conversations and contacts are kept, in line with your own privacy policy.

02

AI Act

The European AI regulation classifies chatbots as limited-risk systems: the main obligation is transparency.

Built-in transparency

Visitors always know they are interacting with an AI assistant, as required by Article 50 of the AI Act.

Answers grounded in your content

The assistant answers from your own knowledge base: sources you control, update and can verify at any time.

Human control over behaviour

You define the assistant’s rules, tone and boundaries: human oversight stays at the centre, as the regulation requires.

03

Data & infrastructure

How conversation data, contacts and your knowledge base are hosted and protected.

European infrastructure

Services hosted in European data centres, in line with GDPR data localisation and transfer requirements.

Encryption in transit

The widget, dashboard and APIs communicate exclusively over encrypted HTTPS/TLS connections.

Verified integrations

Webhooks signed with HMAC cryptography and API access protected by dedicated keys: only your systems receive your data.

Your data stays yours

Conversations and knowledge base content are never shared with third parties nor used to train external models.

04

Privacy by design

Privacy isn’t an afterthought: it’s how we designed every component, from the widget to the analytics.

Cookieless analytics

This site’s statistics run on Matomo with no cookies and anonymised IPs: no invasive visitor tracking.

Consent management

Cookie consent is handled by a compliant CMP, and the IKIbrain widget respects the choice expressed in the banner.

Transparent lead capture

When the assistant collects a sales contact, the visitor knows what they are sharing and why: no data gathered behind their back.

An AI assistant that plays by the rules

Want to dig into a specific topic — DPA, data retention, the AI Act? Get in touch: we’ll reply with documentation and technical details.

Get in touch