Data use, training & retention — found from sitemap — Omnifact

Cited by

Facts read from this source

• DPA entity Report an error

  “Omnifact GmbH, Hansaallee 154, 60320 Frankfurt, Germany”

• DPA language Report an error

  “This version of the DPA is a translation of the original German version of the DPA. Only the German version shall be decisive for the legal effects between the Parties.”

• DPA effective date Report an error

  “Effective Date: April 21st, 2026”

• DPA governing law Report an error

  “This agreement is subject to German law. The exclusive place of jurisdiction is Frankfurt am Main.”

• Breach notification hours Report an error

  “the processor shall inform the controller immediately, but at the latest within 24 hours, in writing or electronically”

• Subprocessor change notice days Report an error

  “if the processor notifies the controller of such a change or such a new commissioning in writing or in text form at least 30 days before the start of the sub-processing”

• EU eea processing Report an error

  “The processing of the client data generally takes place in a member state of the European Union ("EU") or another state party to the Agreement on the European Economic Area ("EEA").”

• Data subject request SLA days Report an error

  “It shall provide the controller with the requested information about client data without delay, but at the latest within seven (7) working days”

• Deletion on request Report an error

  “The deletion of an organization can be requested via our support (support@omnifact.ai); deletion takes place within 30 days unless statutory retention obligations prevent this.”

• Deletion implemented Report an error

  “The deletion of chats, users and organizations is technically implemented and documented.”

• Backup retention Report an error

  “Point-in-Time Recovery (PITR): daily snapshots + continuous WAL archiving, 30 days retention, Microsoft-managed storage accounts (isolated from customer access). RPO approx. 5 minutes, RTO approx. 2 hours.”

• Audit log retention days Report an error

  “Logs are retained for at least 90 days, transmitted and stored encrypted, and are protected against modification during the retention period (append-only).”

• ISO 27001 certified Report an error

  “Omnifact operates an Information Security Management System (ISMS) according to ISO/IEC 27001:2022, which has been certified since April 14, 2026.”

• Azure region Report an error

  “All customer data on the Omnifact platform is processed in Microsoft Azure, Region Germany West Central (Frankfurt).”

• Backups in EU Report an error

  “Backups and replicas of customer data remain exclusively within the Azure infrastructure in the EU (Frankfurt).”

• Encryption at rest Report an error

  “All services are configured so that the data is stored "encrypted at rest" (AES-256). This applies to PostgreSQL, Blob Storage and all other persistent Azure services.”

• Encryption in transit Report an error

  “Data transmission is fundamentally encrypted (HTTPS/TLS) - both between client and platform and between internal services.”

• Pen tests annual Report an error

  “Penetration tests: Annual external penetration tests with documented remediation.”

• SLA availability Report an error

  “System availability SLA: 99.9%.”

• Privacy filter Report an error

  “A custom-trained Small Language Model (SLM) for Named Entity Recognition (NER)”

• Privacy filter location Report an error

  “The entire filtering process takes place exclusively within the Omnifact platform on infrastructure in Germany (Azure Region Germany West Central, Frankfurt).”

• SAML SSO Report an error

  “Customer authentication: SAML 2.0 including Azure AD / Microsoft Entra ID; automatic session locking on inactivity.”

• Org client separation Report an error

  “Our data model is divided according to clients (organizations).”

• Llm providers toggleable Report an error

  “Customers can independently activate or deactivate LLM providers for their organization and adapt the available services to their needs.”

• Microsoft Report an error

  “Microsoft Germany GmbH Walter-Gropius-Straße 5 80807 Munich Yes”

• Twilio sendgrid Report an error

  “Twilio Inc. (Sendgrid only for e-mail dispatch)”

• Brave search Report an error

  “Brave Software, Inc. (Web search via Brave Search API)”

• Stripe Report an error

  “Stripe Payments Europe, Limited (Payment processing via WebApp)”

• Mistral Report an error

  “Mistral AI 21 Rue Tandou, 75019 Paris 19, France Yes”

• Anthropic Report an error

  “Anthropic PBC 548 Market St,”

• Google vertex AI EU Report an error

  “Google Cloud EMEA Limited (Vertex AI) 70 Sir John Rogerson's Quay, Dublin 2, Ireland Yes – Gemini and Anthropic models with EU hosting (region europe-west) are provided via Google Vertex AI. Data processing takes place within the EU.”

• MFA mandatory Report an error

  “Multi-factor authentication (MFA) is mandatory for all central systems:”

• Developers no prod access Report an error

  “Developers have no access to production data.”

• No test with customer data Report an error

  “We do not test with customer data - only synthetic or anonymized data is used.”

• Recovery test annual Report an error

  “Restoration from backups is tested at least annually in the development environment; results are documented (Data Recovery Test Log).”

• Usage analytics anonymized Report an error

  “Anonymized, non-personal usage data (e.g. frequency of calling certain functions such as "Create Space")”

• DPA conclusion method Report an error

  “Note - This agreement is concluded electronically together with the GTC when registering an account.”

• Audit rights Report an error

  “the controller shall have the right, in consultation with the processor, to carry out on-site audits itself or have them carried out by auditors to be appointed in individual cases.”

• ISO badge footer Report an error

  “ISO 27001 Certified Audited & certified”

• Deployment options Report an error

  “Managed, own cloud or on-premise”

4 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Automation Lead Data use, training & retention
• The Automation Lead Models & processing location
• The Automation Lead Admin, identity & access controls
• The Automation Lead European sovereignty
• The Automation Lead Data use, training & retention
• The Automation Lead Models & processing location
• The Automation Lead Admin, identity & access controls
• The Automation Lead Agent capabilities & guardrails
• The Automation Lead European sovereignty
• The Customer-Service Director Data use, training & retention
• The Customer-Service Director Models & processing location
• The Customer-Service Director Admin, identity & access controls
• The Customer-Service Director European sovereignty
• The Customer-Service Director Data use, training & retention
• The Customer-Service Director Models & processing location
• The Customer-Service Director Admin, identity & access controls
• The Customer-Service Director European sovereignty
• The Data Protection Officer Data use, training & retention
• The Data Protection Officer Models & processing location
• The Data Protection Officer Admin, identity & access controls
• The Data Protection Officer European sovereignty
• The Data Protection Officer Data use, training & retention
• The Data Protection Officer Models & processing location
• The Data Protection Officer Admin, identity & access controls
• The Data Protection Officer Integrations, connectors & knowledge
• The Data Protection Officer European sovereignty
• The Head of IT Data use, training & retention
• The Head of IT Models & processing location
• The Head of IT Admin, identity & access controls
• The Head of IT European sovereignty
• The Head of IT Data use, training & retention
• The Head of IT Models & processing location
• The Head of IT Admin, identity & access controls
• The Head of IT European sovereignty
• The Skeptic Data use, training & retention
• The Skeptic Models & processing location
• The Skeptic Admin, identity & access controls
• The Skeptic European sovereignty
• The Skeptic Data use, training & retention
• The Skeptic Models & processing location
• The Skeptic Admin, identity & access controls
• The Skeptic European sovereignty
• The Works Council Member Data use, training & retention
• The Works Council Member Models & processing location
• The Works Council Member Admin, identity & access controls
• The Works Council Member European sovereignty
• The Works Council Member Data use, training & retention
• The Works Council Member Admin, identity & access controls
• The Works Council Member European sovereignty