SECURITY
Hosted on Microsoft Azure within the EU, fully encrypted, and audited twice a year; both internally and by an external penetration tester.
Hosting & infrastructure
We are fully hosted on Microsoft Azure within the EU, utilizing the same robust infrastructure trusted by banks and governments.
Encryption
Data stored encrypted (at rest) and encrypted during transmission (in transit), always.
Access control
Only employees who need it for their work. MFA is mandatory, and all access is logged.
Monitoring
Our platform is continuously monitored for unusual activity. Something wrong? We will let you know right away.
Tested twice a year
One internal security audit and one external pentest per year. Reports are available to clients upon request.
Data processing agreement & subprocessors
A data processing agreement is a standard part of our services. We work with a limited number of carefully selected partners for hosting and payments.
Legal frameworks
We operate within the framework of the GDPR and closely monitor developments surrounding the EU AI Act. Our AI reads and categorizes contracts, but never makes autonomous decisions. You always remain in control.
Cancellation & removal
Are you leaving summie? You have 90 days to export your data. After that, we will delete your information, with the exception of anything we are legally required to keep.
Last updated: August 25, 2026