Security / trust page — Noota

Cited by

Facts read from this source

• ISO 27001 Report an error

  “Noota is ISO 27001 certified. The certificate and documentation are available in the trust center.”

• Secnumcloud Report an error

  “A SecNumCloud-compatible architecture with European sub-processors only, for organizations that need sovereign deployment.”

• GDPR Report an error

  “EU-only hosting for EU customers, an appointed DPO, DPIAs for sensitive uses, data-subject requests handled within 30 days.”

• EU AI act Report an error

  “A qualification analysis of our AI systems under the AI Act, available on request, and an AI ethics implementation guide.”

• Dora Report an error

  “For banks and insurers: business continuity and disaster recovery plan, incident response, third-party management.”

• CCPA Report an error

  “Consumer rights over personal information are supported for customers who need them.”

• No AI training Report an error

  “Your conversations are not used to train our models, or anyone else's, on any plan including Free.”

• No data selling Report an error

  “No data brokerage, no advertising, no enrichment resold to a third party. Our revenue comes from subscriptions and nothing else.”

• No data sharing Report an error

  “Sub-processors are limited to what running the service requires, and every one of them is listed — per environment — in the trust center before you sign anything.”

• Sovereign environment Report an error

  “The sovereign environment is an Enterprise option: hosting on Scaleway in Paris and on Bleu, a SecNumCloud trusted cloud, with Mistral and open-weight models.”

• Sovereign subprocessors Report an error

  “The level above: a supply chain where every sub-processor is European, with no US-controlled entity anywhere in it.”

• Encryption rest detail Report an error

  “All stored data is encrypted with AES-256, keys managed in Google Cloud KMS.”

• Data isolation Report an error

  “Each customer's transcripts, audio and metadata are segregated from other tenants.”

• Data ownership Report an error

  “You keep full legal ownership of your content and can require its removal at any time.”

• Internal access Report an error

  “Staff can view customer data only when you explicitly authorise it, and every access is logged.”

• Count Report an error

  “Seven providers, all hosted in Europe”

• Google cloud Report an error

  “Google Cloud Platform Infrastructure hosting Europe”

• Scaleway Report an error

  “Scaleway Infrastructure hosting France”

• Mistral AI Report an error

  “Mistral AI Language models France”

• Gladia Report an error

  “Gladia Transcription Europe”

• Recall Report an error

  “Recall Meeting services Europe”

• Brevo Report an error

  “Brevo Email France”

• Bastion Report an error

  “Bastion Technologies Security and compliance management France”

• Subprocessor review Report an error

  “Each one works under a data processing agreement, may not keep your data longer than necessary, and has its access reviewed every quarter.”

• Trust center documents Report an error

  “ISO/IEC 27001 certificate External penetration testing reports Security assurance plan System description Business continuity and disaster recovery plan Information security policies Data processing agreement EU AI Act qualification analysis”

• Standard models Report an error

  “Google Cloud Vertex AI Claude Gemini Mistral”

• Sovereign providers Report an error

  “Scaleway Telnyx Mistral Open weights Bleu”

• Outbound caller number Report an error

  “Outbound calls display your own number”

9 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Management Consultant Retention, AI training & administration
• The Management Consultant European sovereignty
• The Data Protection Officer Retention, AI training & administration
• The Data Protection Officer European sovereignty
• The IT Lead Retention, AI training & administration
• The IT Lead European sovereignty
• The Sales Team Lead Retention, AI training & administration
• The Sales Team Lead European sovereignty
• The Skeptic Retention, AI training & administration
• The Skeptic European sovereignty
• The Works Council Chair Consent, participant rights & works council
• The Works Council Chair Retention, AI training & administration
• The Works Council Chair European sovereignty