Trust
Trust and security at LICENSEWARE
LICENSEWARE is SOC 2 Type 2 attested and runs as SaaS on Google Cloud Platform, in three regional instances that are fully isolated from each other. Here is where your data lives, how it is protected and how it is used.
SOC 2 Type 2 attested
LICENSEWARE holds a SOC 2 Type 2 attestation, an independent auditor's report that its security controls are well designed and operate effectively over time. SOC 2 is attested, not certified.
Hosting
SaaS only, in the region you choose
LICENSEWARE is SaaS only, with no on-premises or private cloud version. All customer data is held on Google Cloud servers in the region you select, each instance is fully isolated, and customer data does not move between regions.
app.licenseware.io
Netherlands. Data stays in region.
us.licenseware.io
Iowa. Data stays in region.
au.licenseware.io
Sydney, Australia. Data stays in region.
Encryption and infrastructure
Encrypted in transit and at rest
In transit
TLS 1.2 or higher between users and the platform, and Cilium with WireGuard for service-to-service traffic.
At rest
Encrypted with Google-managed keys and automatic key rotation, including application storage, persistent volumes, monitoring data and backups.
Google Cloud Platform
The platform runs on Google Cloud Platform, with Cloudflare WAF and GCP load balancers for DDoS mitigation and traffic filtering.
Access control
Role-based access control gives each user one of two roles, editor or viewer. Sign in with Microsoft or Google SSO, or turn on two-factor authentication with a TOTP authenticator app.
NEO and AI
How AI handles your data
NEO answers grounded only in your data, and AI processing follows the same residency model as the rest of the platform.
On our infrastructure
Models are deployed on LICENSEWARE's infrastructure with API-based inference, with Microsoft Azure and Google Cloud for compute.
No training on your data
No identifiable customer data is used for model training.
Only on demand
Documents are analyzed only on demand, when you explicitly request it.
Privacy
How your data is used
When you connect a third-party service, LICENSEWARE uses the information it makes available only to provide the services you have contracted for.
Not sold
Data from connected services is not sold.
No advertising
Data from connected services is not used for advertising.
No generalised AI training
Data from connected services is not used to train generalised AI or machine learning models.
The details are in our Privacy Policy and our Data Processing Addendum.
Documents
Legal documents
Privacy Policy
How we collect, use, share and protect personal data.
Data Processing Addendum
How Licenseware processes customer personal data under Article 28 GDPR.
Subprocessor List
The subprocessors Licenseware engages, what each one does and where it processes data.
All legal documents
Every policy, term and agreement of Licenseware Technology Services S.R.L.
Questions about security or your data?
Talk to the team about your region, your data and how LICENSEWARE handles it.