Security

Security and control in Crafteer.ai

How we protect your company's and your customers' data, and where everything is kept.

1. Approval wherever your company wants it

Each procedure sets which steps run on their own and which wait for someone on your team to approve them, such as emails and messages to customers. Those that wait sit in the chat with the draft ready to review. Everything is logged.

2. Permissions and logging

Each user sees and does what their role allows. Every step of every process is logged on the activity: what the AI did, when, and who approved it. In the ERP, where the API allows, each action is recorded under the matching user. Sessions end after 24 hours.

3. Where the data is kept

• Hosting: Amazon Web Services, Ireland region (European Union).
• Network and attack protection: Cloudflare.
• AI models: OpenAI and Anthropic, accessed wherever possible through EUrouter, a gateway with European infrastructure.
• Encrypted connections (TLS) between the browser, the platform and connected systems.

4. Your data does not train models

We do not use connected mailbox content, portal credentials or your customers' data to train or improve AI models. None of our providers is allowed to do so.

5. GDPR

For your customers' data, LucidHorizon acts as a processor. Our Data Processing Agreement (DPA) and sub-processor list are published, and we give 10 business days' notice before adding or replacing a sub-processor.

• Privacy policy
• Data Processing Agreement (DPA)
• Sub-processors

6. ISO/IEC 27001

LucidHorizon is working towards ISO/IEC 27001 certification. We use Drata, a platform that audits our processes and ways of working every day to check we stay compliant.

7. Report a security issue

Email support@lucidhorizon.tech.