TRUST CENTRE
Clear controls.
Clear boundaries.
Practical information for customers reviewing how AIDEALT handles evidence, access and handover. Reviewed 16 October 2026.
| Area | Current implementation |
|---|---|
| Workspace access | Authenticated accounts. The application verifies identity and workspace ownership on the server before returning customer data. |
| Evidence storage | Private Supabase buckets. Access to stored files is granted through the application for an authorised workspace or a valid scoped sharing link. |
| Primary hosting | Application on Render in Frankfurt. Database and private evidence storage on Supabase in Frankfurt. Public marketing pages on Cloudflare’s global network. |
| Transport | HTTPS for public pages, application traffic and external service connections. |
| Supplier intake | EUDR supplier links are scoped to a request. Suppliers can answer in Portuguese without an account. Treat an intake link as confidential. |
| Verifier handover | CarbonProof rooms use expiring, revocable links with a maximum lifetime of 30 days. The product stores a hash of the room token. Anyone with a valid link can access that room. |
| Record integrity | CarbonProof hashes original uploads with SHA-256, links values to source references and locks a reporting period when its snapshot is frozen. |
| Portability | Evidence packages can be exported. CarbonProof export includes a snapshot, manifest and original documents within the package limit. |
| Billing | Stripe processes payment details. AIDEALT does not store card numbers. |
| Model training | Customer evidence is not used to train general-purpose AI models. |
PROCUREMENT / AIDEALT
Ready for a
procurement conversation.
Download a factual brief, review the data-processing documents or send us your requirements before starting a paid engagement.
START WITH ONE REAL WORKFLOW
Make your next evidence
handover a better one.
Try the workflow before you commit. Start a pilot or bring us the requirements for your operation.