Skip to content
Security and data

We treat your customers’ data as though it were regulated.

Clinics, brokers and law firms use Ninjabot. We built the way it handles data for the strictest customer in the room.

The short version
The data stays in the EU. Processing and storage both.A DPA for every customer. Not an extra and not an exception.Your data never trains anyone else’s model. Not once.
Question one

Where the data sits and who reaches it.

Data stored in the EU

Customer data and conversation data are processed and stored inside the European Union.

Access control and encryption

Data encrypted in transit and at rest. Role-based access in your team; least privilege in ours.

The agent sees only what you allow

You decide in the configuration which CRM fields the agent reads from and which it does not. Internal scoring and notes between colleagues stay out of it.

Question two

What we may do with it and what we may not.

GDPR-compliant processing

Processing on a proper legal basis for both outreach and inbound conversations; consent and opt-outs are honoured automatically across SMS, email and phone.

Your data stays yours

We never use your contacts or conversations to train models for other customers, never sell them, and export them on request.

Handover to a person

Conversations pass to your team by rules you set yourself. The AI never acts outside the limits you give it.

Question three

What we will sign.

A DPA is available

A data processing agreement is available to every customer. Standard for clinics, finance, legal services and anyone who takes GDPR seriously.

NDA and security documentation

We sign NDAs as a matter of course. Security documentation goes out on request, straight to your data protection officer if you like.

Need the paperwork? Ask us for the DPA, the list of sub-processors, or answers to your own security questionnaire.

Questions from your data protection officer? Bring them.

Bring your compliance specialist onto the call. This is a conversation we are at home in.

Trust & security: GDPR, EU data residency, DPA | Ninjabot