Your data, handled like it's revenue.

Customer data is stored and processed on Google Cloud Platform (GCP) and Amazon Web Services (AWS), infrastructure with best-in-class physical security, redundancy and availability.

Data is encrypted in transit and at rest, using AES-256 and TLS 1.3. Access is restricted to the personnel who need it to operate the service, with role-based access control and multi-factor authentication on every internal account.

Connections use API-based authorisation scoped to the data Sarucci needs, never stored plaintext credentials.

We operate in line with GDPR requirements: data-processing agreements are available, data-subject rights including erasure are honored, and data is processed only to deliver the service. This describes our practices, not a certification.

Your data is yours. On termination, we return or delete customer data per your instruction within the retention window stated in your agreement.

Our agents run on leading AI providers, including Anthropic Claude, OpenAI and Google Gemini. Every AI call is made over an encrypted connection, and we do not share identifiable guest data with AI providers.

Not yet, and we won't display badges we haven't earned. This page will be updated as formal certifications are achieved.