SECURITY & COMPLIANCE
Your security review,
answered.
27001
ISO/IEC certified, independently audited.
0
Models trained on your data.
3
Ways to deploy, from EU cloud to on-premises.
EU
Hosted in the EU by default.
THE ANSWERS
Secure at every layer,
from data to agent.
01
Where does it run?
HOSTING
Scotty EU cloud, your own cloud or on-premises.
02
What happens to our data?
TRAINING
Never used to train models.
LLM PROVIDERS
Zero data retention.
ENCRYPTION
At rest and in transit.
03
Who can see what?
ROLES
Role-based access control, from organization to project.
SERVICE ACCOUNTS
Automated work doesn't depend on a person's login.
SECRETS
Never shown.
04
What can the agent do?
PROCESS
You decide what it does alone, what needs approval and when it hands over to a person.
ALLOWLISTS
Only the tools, systems and phone numbers you allow.
CREDENTIALS
Never reach the model.
05
Who checks it?
CERTIFICATION
ISO/IEC 27001:2022, independently audited.
GDPR
DPA available.
PEN TESTING
Regular. Summary in the Trust Center.
MONITORING
Continuous.
SUB-PROCESSORS
Listed in the Trust Center.
AUDITABILITY
AI you can audit.
People always in control.
Every turn, tool call, cost and decision is logged. Export it for your auditors, or query it in SQL.
FAQ
Questions security
teams ask first.
No. Your data is never used to train models, and LLM providers keep no copy of it.
Yes. In your own cloud, on-premises or in the Scotty EU cloud.
In the Trust Center.
Yes. The executive summary is in the Trust Center.
