Your data, your jurisdiction, your control.
GDPR-aligned. Every product across the SLAtech ecosystem follows the same data principles - no exceptions for any vertical.
Four pillars, four promises.
The basics, done properly. No security theatre.
Where your data lives
Your knowledge base, conversations and leads are stored on our hosting provider's infrastructure, isolated per tenant: every query is scoped to your account. To answer a question, the question, the relevant passages from your content and the recent conversation are sent to our language-model provider, which processes them in the United States. SLAtech does not use your content to train models. Hosting in your own jurisdiction is available as a custom deployment on request.
Encryption and secrets
TLS 1.2 or higher in transit, with HSTS. Sensitive credentials such as channel and calendar tokens are encrypted at application level before storage. Passwords and API keys are stored only as hashes. Further detail on request.
No scraping, no resale
Your customer conversations are not used to train AI models and are never sold. They are processed only by the sub-processors listed on our sub-processors page, to run the service. Cross-customer network learning is off unless you opt in; if you do, only anonymised samples of questions are pooled.
Data subject rights
Customers can request access, export, or deletion of their data through you, the operator. We give you the tools to comply.
A short list of things we'll never do with your data.
Most policies tell you what a company will do. The interesting list is the other one.
- Your conversations are not used to train AI models
- No data resale to advertisers, brokers, or AI training datasets
- No tracking pixels embedded in your visitor-facing widget
- No marketing emails to your end-users from us - ever
- No surprise sub-processors: categories are published, and the named list is in the DPA on request
Conversations are deleted on request, and after a subscription ends. We don't keep what we don't need.
Documentation for the people who need it.
SLAtech LTD is a registered Israeli company operating under GDPR data protection standards. Our processing is GDPR-aligned, hosting in your own jurisdiction is available as a custom deployment on request, and we're set up to support European clients without surprises.
For procurement, security review, or DPA paperwork, contact us directly. We'll send the documentation that fits your situation - DPA, security overview, processing description, or subprocessor list.
For end-user data subject requests (access, export, deletion), our products give you the tools to fulfill them as data controller. We act as processor on your behalf.
Verify trust signals yourself
Trust statements are just claims without verification - these four tools let you check every commitment independently:
Trust earned, not claimed.
Try a product, review the integration, see how data flows. The shortest path is talking to us directly.