Quality, security and environment – audited

Data protection under the GDPR

We process and store personal data within the EU. On request the solution runs on-premises in the customer's own data centre, so the data never leaves the building. Processing agreements under Art. 28 GDPR, deletion concepts, encryption and role-based access control are a fixed part of every project.

EU AI Act

When AI-supported voice solutions are used, we attach importance to transparency, traceable processing and human control over automated processes. We support customers in meeting the requirements of the EU AI Act – from risk classification and the labelling of AI-generated interactions through to documentation. The legally binding assessment of conformity remains with the operator.

DORA

For customers in the financial sector we provide relevant security and process evidence for our services. Depending on the agreed scope, we also assist with customer-specific audit documents, audits and risk and gap analyses relating to the CreaLog services in use. Assessing the regulatory requirements that apply to the individual company, and compliance with them, remains that company's responsibility.

NIS-2

In connection with NIS2 we provide relevant evidence of our security measures and operational processes. Depending on the agreed scope, we also assist with customer-specific audits, risk analyses and the handling of security-relevant incidents relating to the CreaLog services in use. Assessing the regulatory requirements that apply to the individual company, and compliance with them, remains that company's responsibility.

Quality and environment

We align our processes consistently with the customer and review them regularly. For the environment that means careful use of resources, energy-efficient product design, durable materials and recycling across the product lifecycle. The basis is certified systems to ISO 14001 and compliance with the RoHS requirements.