Legal
Compliance, data protection, and contracts. SynaptoSec, operating from Antwerpen, Belgium (BV registration in progress), is designed to support GDPR, NIS2, and EU AI Act compliance. We process all data in Amsterdam, Netherlands. No transfers outside the EEA without SCCs.
Privacy Policy
Who we are, what data we collect and why, how long we keep it, and your rights — built from a verified facts register.
Cookie Notice
The audited cookie inventory: only strictly necessary cookies, disclosed here. No analytics, no tracking.
Terms of Service
Service description (early access), account and API key rules, acceptable use, and the honest limits of a detection aid.
Refund and Cancellation Policy
Business-customer cancellation terms today; the consumer-withdrawal outline for possible future consumer sales.
Your GDPR Rights
How to exercise your data subject rights, and how we handle them.
Data Processing Agreement (DPA)
Controller/processor roles for customers who send personal data through the API, plus a downloadable draft template.
Sub-processors List
Every processor we actually use — verified against our infrastructure, not a template list.
Security and Responsible Disclosure
Verified security measures, incident response, and how to report vulnerabilities safely.
Public Limitations
Clear documentation of architectural boundaries, what we do not block, and out-of-scope threat vectors.
Legal Notice
Operator and provider information (BV registration in progress).
Changelog
Versions and effective dates of every legal document on this site.