Skip to main content
Beta: LLM Observability is now GA
aiAxonIQ
Try Playground

Legal

GDPR

How aiAxonIQ supports your obligations under the General Data Protection Regulation.

This page summarises commitments made in our Privacy Policy and Data Processing Agreement. Those documents are what bind; where this summary and they differ, they govern. Questions go to our Data Protection Officer at dpo@aiaxoniq.com.

Our role

  • For the telemetry you send, you are the controller and aiAxonIQ is the processor.
  • We process personal data only on your documented instructions.
  • People authorised to process it are bound by confidentiality obligations.
  • We make available the information needed to demonstrate compliance, and allow for audits.

Source: Data Processing Agreement

Data subject rights

  • Access, correction, deletion, portability, objection and restriction.
  • Portability in standard, machine-readable formats: JSON, Parquet and OTLP.
  • Email privacy@aiaxoniq.com to exercise a right; we respond within 30 days.
  • As a processor, we assist you in responding to requests about your end users.

Source: Privacy Policy

International transfers

  • Transfers from the EU/EEA to the US rely on Standard Contractual Clauses (Module 2).
  • UK transfers use the UK International Data Transfer Addendum.
  • Enterprise customers can choose EU-only residency (AWS eu-central-1, Frankfurt), where telemetry does not leave the EU.

Source: Data Processing Agreement

Sub-processors

  • The current list is published in the DPA and the Trust Center.
  • We notify you at least 30 days before adding a sub-processor.
  • You may object within 15 days; if we cannot address it, you may terminate the affected service.

Source: Data Processing Agreement

Security and breach notification

  • Technical and organisational measures are described on the Security page.
  • We notify you of a personal data breach without undue delay, and within 72 hours of becoming aware of it.
  • We cooperate in investigating and mitigating a breach, and keep records of every breach.

Source: Security

Deletion

  • On termination, personal data is deleted within 30 days, or returned at your choice.
  • A certificate of deletion is available on request for Enterprise customers.
  • Telemetry past its retention period is permanently deleted, including backups, within 30 days.

Source: Data Processing Agreement

See also the Trust Center.