Privacy, security, and compliance are core values at Gladia. Our systems are built to protect customer data by default, minimize risk exposure, and support production workloads in regulated environments.

Your data is not a bargaining chip

Customer data protection is non-negotiable. it's built on a strict framework that ensures control, transparency, and trust:

👁 Image

Customer data remains fully owned by the customer

👁 Image

Data is processed solely to deliver the requested service

👁 Image

Zero Data Retention policy for paid plans

👁 Image

Clear retention and deletion controls

👁 Image

Full transparency on data usage and data location

👁 Image

EU design, global security

Data subject rights are fully supported by design and by default. This includes:

👁 Image

Security embedded across infrastructure and development

👁 Image

Encryption in transit and at rest

👁 Image

Least-privilege access controls

👁 Image

Audit logging & monitoring of production systems

👁 Image

Regular third-party security reviews

Your data is not a bargaining chip

Customer data protection is non-negotiable. It's built on a strict framework that ensures control, transparency, and trust:

👁 Image

Customer data remains fully owned by the customer

👁 Image

Data is processed solely to deliver the requested service

👁 Image

Zero Data Retention policy for paid plans

👁 Image

Clear retention and deletion controls

👁 Image

Full transparency on data usage and data location

👁 Image

EU design, global security

Data subject rights are fully supported by design and by default. This includes:

👁 Image

Security embedded across infrastructure and development

👁 Image

Encryption in transit and at rest

👁 Image

Least-privilege access controls

👁 Image

Audit logging & monitoring of production systems

👁 Image

Regular third-party security reviews

👁 Image

Ready for regulated industries

We support teams operating in regulated environments including healthcare, financial services, enterprise SaaS, and EU-regulated markets through documented controls and contractual safeguards.

Discover our Trust Center

👁 Image

Data Lifecycle & Usage

How Gladia manages your data

Data retention and deletion

Your data is retained only as long as needed and permanently deleted once expired or upon account closure.

👁 Image

Deleted data cannot be recovered

👁 Image

Account closure triggers an expired data state

👁 Image

Customers must export or back up data before account closure

👁 Image

Expired data is permanently deleted after the retention period

Model training & data usage

Your data is isolated by default and never used for model training unless explicitly agreed.

👁 Image

No cross-customer data sharing

👁 Image

Training exclusions applied by default

👁 Image

Any exception requires explicit agreement

Data Subject Rights (GDPR)

Full GDPR compliance, EU-style.

👁 Image

Support for access, rectification, and deletion requests

👁 Image

Requests handled within applicable regulatory timelines

👁 Image

Clear contact paths defined in the Privacy Notice

👁 Image

Access AND Encryption

How Gladia secures your data

Data access controls

Access to your data is strictly limited, isolated per account, and continuously audited.

👁 Image

Data is logically isolated per customer account

👁 Image

Employee access to production data is disabled by default

👁 Image

Temporary access requires explicit approval

👁 Image

All access is logged and regularly reviewed

Encryption & secure transfer

All data is encrypted at rest and in transit using secure, authenticated connections.

👁 Image

All customer data is encrypted in transit and at rest

👁 Image

Secure, authenticated connections are enforced across services

Incident response

Security incidents are documented, with timely investigation, notification, and remediation.

👁 Image

Incident response procedures are clearly documented

👁 Image

Incidents are promptly investigated, contained, and remediated

👁 Image

Notifications follow contractual and legal requirements

👁 Image

Post-incident reviews are conducted to prevent recurrence

👁 Image

Data Residency & Infra

How Gladia processes your data

Data residency & processing location

Data from EU and US workloads are kept separate on region-specific infrastructure.

👁 Image

Data is processed on region-specific infrastructure

👁 Image

EU and US workloads are hosted separately

Contractual safeguards

Our transparent contracts govern data processing, confidentiality, and regulatory obligations.

👁 Image

Data Processing Agreements (DPA) available for EU and US customers

👁 Image

Business Associate Agreements (BAA) available for healthcare use cases

👁 Image

Confidentiality and non-disclosure obligations enforced contractually

Sub-processors & third-party services

Core infrastructure relies on vetted third parties

👁 Image

We use third-party service providers to deliver core infrastructure

👁 Image

A maintained list of subprocessors, purposes, and processing locations is available

👁 Image

GDPR Compliant

👁 Image

HIPAA Compliant

👁 Image

AICPA SOC Type 2

FAQs

Where can I find information on your privacy policy?

👁 Image

Gladia’s Privacy Notice explains how we process personal data depending on your interaction with our services (account creation, service delivery, marketing, and more), and how to exercise privacy rights under applicable laws.

How do you handle security across infrastructure and applications?

👁 Image

We’re committed to protecting your data through technical and organizational safeguards, continuous monitoring, and regular third-party reviews. We also operate a responsible vulnerability disclosure program.

‍

Where can I review your compliance and security documentation?

👁 Image

Our Trust Center provides access upon request to compliance and security resources, including: