Trust

Everything on this page is readable without logging in. If you need it in a form your security team can file, request the DPA directly.

Architecture

No database, server or infrastructure credential is ever entered on any elucide web page. Setup runs on your own infrastructure over local IPC -- see How it works.

Data processing agreement

A DPA template is available on request via Request access (select "Request a DPA").

Sub-processors

Our current sub-processor list is maintained in the DPA and available on request via the same form. We keep this list current rather than publishing a static copy here that can drift out of date.

Compliance status, stated honestly

elucide has no production deployment yet -- our only live engagement is a single pilot with one healthcare organisation, which we do not name here. We are not claiming a certification we do not hold. As our compliance posture matures, this page will be updated to reflect exactly where we stand, not where we intend to be.

Data handling

Identity is managed by a self-hosted Zitadel instance on EU infrastructure. Prospect and tenant contact data is processed under a documented purpose and lawful basis -- ask for our processing record via Request access.