Trust and data handling.
How we handle your data, what we sign, which services this website uses and where we stand on security. Stated plainly, including what we don't have yet.
How we handle client data.
The commitments that apply to every project.
- We work in your cloud accounts and EU regions where possible.
- We don't use your data to train models.
- Access is limited to the engineer working on your project and removed at handover.
- Personal data is processed under a data processing agreement.
Data processing agreement.
We sign a DPA based on the European Commission's Standard Contractual Clauses for transfers to India, which has no EU adequacy decision.
Ask for our template. We sign before any personal data changes hands.
This website's sub-processors.
The outside services that touch personal data when you visit hasorix.com or send an inquiry.
| Service | What it does | Location | Transfer safeguard |
|---|---|---|---|
| Vercel Inc. | Hosting, the contact-form function and cookieless analytics | USA | EU–US Data Privacy Framework |
| Resend | Delivers contact-form emails and the confirmation email | USA | Resend's data processing agreement |
| Google (Gmail) | The inbox where inquiries and emails to us arrive | USA and other countries | Google's data processing terms |
Self-hosted, no third party involved
- Fonts. Served from this website. Your browser makes no request to a font service.
- Spam check. ALTCHA runs on this website and in your browser. No cookies, no tracking.
- EU AI Act checker. Runs entirely in your browser. Your answers are never sent.
Full details are in the privacy policy.
Security practices.
- Multi-factor authentication on every account.
- Least-privilege access, granted per project.
- Secrets kept in managed vaults, never in code or chat.
- Encrypted laptops with automatic screen lock.
Certification roadmap.
Not certified today. HASORIX holds no ISO 27001 or SOC 2 certification. We'll say so plainly until we are.
Privacy requests.
To see, correct or delete the personal data we hold about you, or to ask anything about how we handle it, email us. We answer within one month, as GDPR requires.
Ask before you share anything.
Questions about data, DPAs or security get a written answer within 24 hours on working days.