Security
Security and governance should be clear before the pilot.
Lontra is designed for European requirements: data hosted in the European Union, encryption at rest and in transit, role and scope-based rights, governed retention, and human decisions.
European Union hosting
Lontra data and processing are hosted in the European Union.
Encryption
Data is encrypted at rest and in transit. Architecture details are provided during security review.
Role and scope-based rights
Visibility follows role, team, use case, and the scope permitted by the customer.
Organization separation
Each organization’s data is separated and is not exposed through a shared customer workspace.
Governed retention
Retention is scoped by data type, use case, and customer obligations.
Export and deletion
Access, export, rectification, and deletion requests are handled under the contract and GDPR framework.
AI processing
Models structure and prepare the material. They do not make a decision that affects a person.
Sub-processors
The relevant sub-processor list can be shared during a qualified review.
Traceability
Sources, dates, scopes, and synthesis levels remain separated to support human review.
Pre-deployment review
DPA, DPIA support, architecture, and governance rules are scoped before launch.
Documents available during review
Security questionnaire
Architecture diagrams
DPA template
Sub-processor list
Data retention policy
AI processing note
DPIA support material
FAQ
How is data protected?
Data is hosted in the European Union and encrypted at rest and in transit. Technical detail is shared during security review.
Where is data hosted?
Lontra data and processing are hosted in the European Union.
Does Lontra make HR decisions?
No. Signals and recommendations prepare a human review; they do not make the decision.
Which documents are available?
Security questionnaire, architecture, DPA, sub-processors, retention, AI note, and DPIA support material can be shared in a qualified conversation.
Show us the gap. See what Lontra reveals.
30 minutes. Your problem, your teams, your measure.
Make your best, the standard.