CERTIMAND / Privacy notice

Privacy notice

This notice covers the public Certimand website and synthetic demo. Last updated: 5 September 2026. Customer deployments will require separate agreed data-processing terms.

Who is responsible

The controller is Aegisoft CoopV, NIF F75405555, Escriptor Abu Salt 1, 10, 46009 Valencia, Spain, operating the Certimand brand. Use the Certimand contact form and start your message with “Privacy”. You can also contact the founder on LinkedIn.

Enquiries

If you submit the form, we collect your name, work email, company, enquiry, submission time and acknowledgement of this notice. We use these details to assess fit and respond to your request. We do not add you to a marketing list. Do not include passwords, customer identity inventories or sensitive personal information.

Processing is for steps requested before a possible contract where applicable, and otherwise our legitimate interest in responding to relevant business enquiries. Marketing requires a separate basis and is not part of this form.

Hosting and processors

Google Cloud Run hosts the application in Belgium (europe-west1). Enquiries and delivery receipts are stored in a private Google Cloud Storage bucket in the same region. A contact service hosted on Google Cloud forwards your enquiry to our private Trello board for follow-up. Trello is provided by Atlassian. Google also provides operational logging. Cloudflare provides domain registration and DNS; DNS-only configuration does not proxy website requests.

Google, Cloudflare and Atlassian are international providers. Trello data is not covered by our Belgium hosting commitment. EU hosting alone does not exclude processing outside the EEA. Provider contractual safeguards and transfer mechanisms apply where relevant. Enquiry content is not supplied to the AI model.

Demo and AI

The demo uses fictional records supplied by the server. Selecting an AI investigation sends only that synthetic evidence and a preset intent to Google Vertex AI in the EU multi-region. The demo does not accept customer evidence or free-text AI prompts. Generated demo explanations may be cached and reused for the same synthetic scenario.

Operational data and cookies

The hosting platform may process IP addresses, request paths, status codes, timestamps and technical error information to serve and protect the website. The Certimand application logs delivery references and status codes, not message bodies. The contact delivery service may log names, email addresses, company names and enquiry subjects for delivery diagnostics. Do not put personal information in URLs. The application sets no analytics or advertising cookies and uses no session replay or third-party marketing analytics.

Retention

Private enquiry backups and delivery receipts are configured for deletion from Google Cloud Storage after 90 days. Soft deletion may retain deleted objects for a further seven days. This storage rule does not delete Trello cards. We retain Trello enquiries while handling your request and review them for deletion when they are no longer needed. Relevant correspondence or an agreed customer relationship may be retained separately for that purpose and applicable obligations. You can request deletion using the contact details above. Default operational logs are retained for 30 days. Synthetic demo records contain no real personal data.

Your rights

Depending on the applicable legal basis, you may request access, correction, erasure, restriction, portability or object to processing. Contact the controller above. You can complain to your competent EU supervisory authority, including the Spanish Data Protection Agency at aepd.es. No automated decision with legal or similarly significant effects is made about you by this website.

Questions

Use the controller contact for privacy, deletion or processing questions. This notice describes the implemented MVP and does not claim external legal approval.