Trust Center
Your source data stays in your systems.
Nuscio queries your systems where they sit rather than replicating them. It keeps no second copy of your records and changes nothing until you say go. What it does retain is set out below, in full.
What we store
No replica of your systems. Operational records only, listed in full.
Show detailsHide details
We store
- Account and workspace details
- Authorised connections and their read scopes
- Questions asked and answers returned, which include figures drawn from your systems
- Audit trail of every approval, with who, what and when
We never store
- A replica of your source systems
- No warehouse, no extract, no scheduled sync
Where your data lives
In your systems. Nuscio reads it where it sits.
Show detailsHide details
- Data stays in your infrastructure
- Nuscio never copies it
- Disconnect and the reads stop immediately
Where Nuscio runs
In the European Union. Always.
Show detailsHide details
All processing happens on EU based infrastructure. Data sovereignty is the default, not an upgrade.
Who can access
Least privilege. No standing access.
Show detailsHide details
- No one at Nuscio has standing access to your systems
- Support access is time bound, recorded, and case specific
- If a person cannot see it in your systems, they cannot see it in Nuscio
How long we keep things
Operational logs on a rolling window. Audit records as long as your workspace exists.
Show detailsHide details
The audit record outlives everything else on purpose. It is the thing that makes an approval provable after the fact.
When you leave
Disconnect the systems. The reads stop immediately.
Show detailsHide details
There is no replica of your systems to unwind, because one was never built. The operational records listed above are deleted on request, and the audit trail is kept only as long as your retention period requires.
Subprocessors
Third parties that process data on our behalf.
| Category | Purpose | Region |
|---|---|---|
| Cloud hosting | Application and database hosting | European Union |
| Model provider | Language model inference | European Union |
| Product analytics | Usage analytics * | European Union |
| Transactional email | Account and notification email | European Union |
* Gated behind cookie consent. Nothing is collected until you accept.
Named providers and the change notification process are published before general availability.
Your rights
Under GDPR, all six apply, and the Privacy Policy sets out how to exercise each one.
- Access
- Rectification
- Erasure
- Restriction
- Portability
- Objection