Security & Trust at Hanc.AI

Hanc.AI is built and operated by Good Point GmbH in Vienna, Austria. Core processing runs in EU data centers, a Data Processing Agreement applies to every customer from day one, and every international transfer is documented. Below is our compliance documentation — request access and we will respond within two business days.

GDPR-first DPA applies to every customer automatically
Built for EU AI Act transparency by design
EU processing Germany & Sweden
No training on customer data

Our documentation

Data Processing Agreement (DPA)

Art. 28 GDPR agreement covering every customer. Includes processing description, retention, sub-processing and audit rights.

English, ~15 pages. Request access

Auftragsverarbeitungsvertrag (AVV)

German edition of the DPA with Anlagen 1–3.

Deutsch, ~15 Seiten. Request access

Sub-processor List

Every provider we use: entity, country, purpose, processing location, transfer mechanism.

English. Request access

AI Transparency Statement

How AI is used on the platform, disclosure to callers, recording defaults, no-training commitment.

English. Request access

Technical & Organisational Measures (TOMs)

Full Art. 32 documentation: encryption, access control, network security, backups, incident response.

English. Request access

Security Questionnaire

Pre-answered vendor due diligence questionnaire (~35 standard questions).

English. Request access

Countersigned DPA

Signed PDF copy for your procurement records.

PDF. Request access

Evaluating Hanc.AI? Tell us which documents you need.

Request documents