Skip to content
Am I Compliant

Trust Center

Trust Center

Security and privacy are the foundation of our service. Here we explain transparently how Am I Compliant processes and protects data.

What is Am I Compliant?

Am I Compliant is an information and data processing service for sanctions and PEP screening. Results are research findings, not legal advice. The legal assessment and decision in each case rest with the user. Further details are available in our legal notice.

How do we process your data?

The typical workflow in the product app is as follows:

  1. Upload a document, such as a customer list or supplier export, in the app.
  2. Optical character recognition (OCR) extracts the names of people and companies from the document.
  3. The extracted entities are checked against sanctions, PEP and crime lists.
  4. Receive a traffic-light result with matches and indications of potential risks.
  5. Generate an audit-proof PDF as evidence, with a verification URL that keeps the result traceable.

The data source for list queries is OpenSanctions. We prioritise data minimisation: during the free trial check, the uploaded document stays exclusively in your browser until you sign in and is not stored permanently.

How do we protect your data?

We use technical and organisational measures to protect your data. The following measures apply to the product app, where your screening data is processed:

  • Encrypted transmission via TLS/HTTPS.
  • Authentication through an established authentication service using a password or magic link.
  • Restricted file access through signed, time-limited download links.
  • Separation by user groups (tenant isolation).
  • Roles and permissions for users and administration.

This marketing website: Transmission here is also encrypted via TLS/HTTPS. No advertising or tracking cookies are set, and no screening data is processed. Audience measurement uses cookie-free Pirsch analytics and only takes place if you have consented in the notice banner.

Where is your data processed?

Am I Compliant is operated by Automaxity GmbH, based in Albstadt. Processing takes place in the European Union. We distinguish between two areas: the product app at app.am-i-compliant.eu, where your checks run, and this marketing website at am-i-compliant.eu.

Product app: The database and file storage are located in a data centre in Ireland (AWS region eu-west-1). Text recognition for your uploaded documents is handled by French provider Mistral AI. The data source for list queries is OpenSanctions in Germany.

Marketing website: No screening data is processed here. This website operates neither a database nor file storage. Only server logs and, if you consent, cookie-free audience measurement through Pirsch with servers in Germany are collected.

European data protection law applies to processing. Some providers we use are companies based in the USA. For these providers, we additionally rely on the European Commission's Standard Contractual Clauses for transfers. We list all providers and their areas of use below.

Is Am I Compliant a sovereign cloud?

No. Data is stored and processed in the EU, with the GDPR as the legal basis. However, some providers we use are companies based in the USA, so we additionally rely on the European Commission's Standard Contractual Clauses. If you require digital sovereignty in the strict sense, meaning an entirely European-controlled supply chain, for example in government or critical infrastructure (KRITIS), please discuss this with us before entering into a contract. For industry and trade: processing in the EU, the GDPR as the legal basis and disclosed subprocessors.

How do privacy and the GDPR apply?

Personal data is processed on the basis of the GDPR, particularly Article 6. Our privacy policy applies to the marketing website am-i-compliant.eu. Processing in the product app at app.am-i-compliant.eu is governed by its contractual documents, particularly the Data Processing Agreement.

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection. The data controller is Automaxity GmbH, Albstadt. Full details are available in the privacy policy.

Which services do we use?

We work with subprocessors for certain functions. We list them separately for the product app and the marketing website.

In the product app (app.am-i-compliant.eu)

  • OpenSanctions: Data source for sanctions, PEP and crime lists. Provider based in the EU (Germany).
  • Mistral AI: Text recognition (OCR) for uploaded documents. Provider based in the EU (France), with processing in the EU.
  • Scaleway: Delivery of all automated emails, such as confirmations, screening certificates and invoices. Provider: Scaleway SAS, Paris, France. Processing in the EU.
  • Mollie: Payment processing. Provider: Mollie B.V., Amsterdam, Netherlands. Processing in the EU. Mollie processes payment data largely as an independent controller.
  • Lovable Cloud: Backend provision and management. Provider: Lovable Labs Incorporated, Boston, USA, with an office in Stockholm, Sweden. Transfers based on Standard Contractual Clauses.
  • Supabase: Authentication, database and file storage. Provider: Supabase Inc., USA. Processing in the EU, with a data centre in Ireland.
  • Amazon Web Services: Infrastructure underlying the database and file storage. Region eu-west-1, Ireland. Group headquarters in the USA.

On this website (am-i-compliant.eu)

  • Lovable Cloud: Hosting of this website. Provider: Lovable Labs Incorporated, Boston, USA, with an office in Stockholm, Sweden. Transfers based on Standard Contractual Clauses.
  • Pirsch Analytics: Cookie-free audience measurement, only with your consent. Provider: Emvi Software GmbH, Germany, with servers in Germany. IP addresses are not stored, no user profiles are created, and recognition is possible for a maximum of 24 hours.
  • Fonts: All fonts are delivered with the website. There is no connection to Google Fonts or other external font CDNs.

Which documents are available?

How can you report a security issue?

Please send security or privacy enquiries to hello@automaxity.eu.

Am I Compliant is an information and data processing service and does not provide legal advice. Results are research findings; the legal assessment and decision rest with the user.

Last updated: