GDPR compliant, EU AI Act compliant.

Your CIOs and compliance officers will find here the necessary elements to validate the integration of Amaya AG into your systems.

Hosting & Sovereignty

🇪🇺

Google Cloud Platform

Belgium Region (European Union)

📤

Total reversibility

Full export of your data possible at any time

🚧

Restricted access & Ownership

Reserved exclusively for the Amaya technical team. Role-based user management, and you retain full control over who accesses what data. You are the sole and exclusive owner of your data.

📝

DPA Documentation

DPA and list of subprocessors available upon request

Infrastructure security

🔐

End-to-end encryption

TLS encryption in transit and AES-256 at rest

🛡️

Access control

SSO compatibility and Two-Factor Authentication (2FA)

💾

Business continuity

Daily backups and data redundancy

👁️

System traceability

Systematic audit log of all actions and access

EU AI Act Classification

Module	AI Act Classification	Implication
Amaya Sales	MINIMAL RISK	No specific obligation.
Amaya Advisor	MINIMAL RISK	No specific obligation. Parcel GPS data are processed in accordance with GDPR.
Amaya Coop	MINIMAL RISK	No specific obligation.
Amaya Distributor	MINIMAL RISK	No specific obligation.