Trust, Security, Compliance

Your data,
handled honestly.

Where your interview data lives, who processes it, and what we commit to never doing. Written for your procurement team.

Last updated April 22, 2026
01

EU data residency

Your recordings, transcripts, and scores are stored in Frankfurt, Germany and Western Europe. AES-256 at rest, TLS 1.3 in transit.

02

Human-in-the-loop

Every staffing decision stays with your manager. Intervolut scores are advisory decision-support, not an automated staffing decision.

03

Scoring you can explain

Four signals: clarity, structure, confidence, client fit. Each tied to transcript evidence. Consultants see their own scores.

04

Your data stays yours

No training on your data. No data sales. Delete everything on request, within 30 days.

01 · INFRASTRUCTURE

Where your data lives

Plain infrastructure, plain locations. No mystery.

Core infrastructure vendors publish SOC 2 Type II and ISO 27001 reports. Intervolut itself is not SOC 2 or ISO 27001 certified today. Provider documentation is available during procurement review.

Database
Supabase, Frankfurt (eu-central-1)
Voice and video recordings
Cloudflare R2, Western Europe (WEUR)
Encryption at rest
AES-256
Encryption in transit
TLS 1.3

Current sub-processor list and Data Processing Agreement are available on request.

02 · SUB-PROCESSORS

Who processes what

Public sub-processor list for procurement review. Final contractual terms are documented in the DPA.

ProviderPurposeRegion / transfer
SupabaseDatabase, authentication, application storageFrankfurt, Germany
Cloudflare R2Voice and video recording storageWestern Europe
OpenAI / Azure OpenAI / Google GeminiTranscription, scoring, and AI feedbackContracts and SCCs where transfer outside the EU applies
PostmarkTransactional emailProvider documentation during procurement review
Cal.comDemo schedulingProcessed when a visitor books a meeting
CrispSupport chat after cookie consentProvider documentation during procurement review
PostHogAnalytics after cookie consentConfigured by hosting and consent settings
03 · COMMITMENTS

What we don't do

01

We do not use your interview data to train models.

02

We do not sell your data to third parties.

03

We do not use Intervolut scores to automatically make hiring, firing, promotion, or staffing decisions. A human manager reviews the output.

04

Intervolut is not configured for solely automated decisions. Do not use Intervolut as the sole basis for decisions with legal or similarly significant effects.

04 · EU AI ACT

EU AI Act readiness

Because Intervolut supports staffing and employment-related workflows, we treat it under the EU AI Act high-risk framework for employment and workers management. Enforcement for Annex III high-risk systems begins August 2, 2026.

Documentation track
  • Full provider conformity file
  • Technical and organizational measures documentation
  • Incident response procedure

Procurement teams can request our current AI Act working documentation at contact@intervolut.com.

05 · Next step

Review the evidence, then walk through the pilot.

If the trust posture is acceptable, the next useful step is a 30-minute walkthrough of the report, pilot scope, and data boundaries.