Security & Compliance
Trust, Transparency, Protection
Trust is at the heart of our commitment. Discover how Lynara protects your data, respects regulations and guarantees enterprise-grade security.
1. Secure Architecture & European Cloud
- Supabase HA (AWS Europe)
- Multi-zone replication
- AWS S3 Europe storage
- Redis for performance
- OCR Google Document AI (EU)
- Grafana monitoring (hybrid)
📌 Data hosted exclusively in Europe by default.
2. Sovereignty & AI Data Localization
Default models (EU when available)
- Gemini 3, 2.5 Pro / Flash
- DeepSeek, Minimax
- Llama 4, GLM-4.5
BYOK Mode (Bring Your Own Key)
- Vertex AI, Azure OpenAI
- AWS Bedrock, Anthropic Claude
- OpenRouter, Ollama (local)
📌 Client controls AI localization and policies.
3. GDPR & AI Act Compliance
- Controller / Processor as applicable
- DPA compliant (art. 28 GDPR)
- Processing register
- No public AI training
- Standard Contractual Clauses (SCC)
- AI Act 2025 compliance
4. Application Security
- AES-256 encryption at rest
- TLS 1.2+ in transit
- Multi-tenant isolation via RLS
- Two-factor authentication (2FA)
- Key and secret rotation
- AI anti-injection (LLM Guard)
- Rate limiting & WAF firewall
- Sensitive data hashing
5. Operational Security
- Encrypted backups
- Advanced logging
- 24/7 alerting
- Real-time monitoring
- Vulnerability testing
- Incident Response Plan
6. Confidentiality & Ownership
Data belongs exclusively to the Client.
- Navinspire does not sell data.
- Navinspire never uses it to train a global AI.
- Support access only with explicit authorization.
7. Incident Procedure (GDPR)
- Detection
- Blocking
- Analysis
- CNIL notification < 72h
- Client notification
- Complete report
- Fixes
Certifications & Best Practices
- GDPR compliant
- AI Act compliant
- ISO 27001 practices
- NIST Encryption
- Cloud Security Alliance
Security Contact
Question about compliance or security? contact@navinspire.com