EU data hosting
EU-based cloud infrastructure so your core data stays in Europe.
Compliance
EU-sovereign by default. Governed by design.
Built for teams with privacy, governance and auditability requirements. Hosted and processed in the EU, privacy by design, data subject controls and audit trails, with the agreements and policies your procurement, legal and security reviews ask for.
- Data residency
- EU (Europe)
- Encryption
- At rest and in transit
- Access control
- Roles and account isolation
- Auditability
- Logs and evidence
- Documentation
- Security pack on request
Security is foundational across product, data and infrastructure.
Key controls designed for procurement and regulated teams. Details are available on request.
Security by design
Defense in depth across the application, database and infrastructure layers.
Account isolation
Strict account scoping and visibility patterns to reduce cross-tenant risk.
Encryption
Encryption in transit (TLS) and encryption at rest on managed infrastructure.
Access controls
Role-based access patterns and least-privilege operations by default.
Auditability
Traceable access and changes to support governance and internal controls.
GDPR-ready conversation intelligence.
Hosted and processed in the EU, privacy by design, with built-in tools for consent management, data deletion and audit trails. Processing is governed by our Data Processing Agreement, and the business customer owns the data, the policies and the permitted uses throughout the flow.
EU data residency
All data is processed and stored in EU-based infrastructure. Your conversation data never leaves Europe.
Privacy by design
Encryption at rest and in transit, account isolation, least-privilege access and secure secrets management, built into the foundation.
Data subject controls
Tools for data export, deletion and consent management. Support your GDPR obligations with built-in platform capabilities.
Transparent, accountable AI, with people in control.
Meetric is committed to the responsible development and deployment of artificial intelligence. Our AI Policy sets out our approach to transparency, accountability and compliance in accordance with applicable regulatory frameworks, including the EU AI Act and applicable data protection law.
Source material is the basis
Original recordings, transcripts or text data serve as the verifiable basis for all AI-generated analysis.
Insights link to evidence
Patterns, trends and observations are always presented with clear links to supporting evidence in source materials.
Human oversight
Direct human supervision and review of AI outputs, including the ability to verify, override or correct AI-generated insights.
Three gates before conversation knowledge can travel.
Compliance is not a document set alone. Source access, knowledge access and action rights are separate decisions in the product, attached to every derived object, with retention and deletion that propagate.
Governance · Conversation privacy
Who can see what, at every level.
Rules cascade from Account to Department, Team and User. A lower level may override. Privacy wins on conflict.
Visibility
Department visibilityInherited
Team visibilityInherited
Include managersOverride
Access
Team manager accessInherited
Private conversationsInherited
Sources
CallsShared rulesetMeetingsShared rulesetEmailPrivate by default
Source access
Who may open the original conversation?Recording, transcript or approved email content. Restricted by default to the people and purpose the source belongs to.
Knowledge access
Who may see the minimized object derived from it?A renewal condition can reach customer success without the full sales call. Purpose, role and source policy define the permitted view.
Action rights
What may a person or an AI share, write or act on?An assistant may retrieve the condition and still be blocked from sending it externally or writing it to CRM without separate authorization.
Controls, with their status.
Each control with its current status. Anything not yet available is marked.
Meetric's controls support compliance work. They do not determine a customer's lawful basis, risk classification or legal accountability. The customer owns the data, the policies and the permitted uses throughout the flow.
HostingHosted and processed in the EU
Data minimizationOnly the minimum permitted view leaves the layer
PermissionsSource and derived-knowledge permissions; restrictions inherit by default
LifecycleRetention and deletion propagate across raw and derived objects
AuditAudit-event logging and export, enabled per deployment
Downstream policyAccess, retention and deletion rules sent with content to receiving systemsIn validation
How we reduce risk, protect data and support audits.
Application security
- Account-scoped access patterns and strict isolation.
- Input validation and safe defaults for user and AI-generated content.
- Audit logging patterns for sensitive operations.
Infrastructure security
- Secure secrets management and environment separation.
- Network-level protections and least-privilege service access.
- Backups and disaster recovery procedures for critical data.
Governance & compliance
- EU-first posture and GDPR-ready practices for regulated teams.
- Monitoring and operational readiness to catch issues early.
- Security documentation available for reviews on request.
Everything a review asks for, in one place.
Read our agreements and policies here, or download the original documents for your review. The security pack is shared under NDA.
Data Processing Agreement
Processing framework under GDPR
OpenPrivacy policy
How personal data is handled
OpenAI policy
Transparency, accountability and oversight under the EU AI Act
OpenTerms of service
Customer agreement
OpenSecurity pack
Architecture, integration matrix, data-flow diagram and processor list, under NDA
RequestData protection officer
Questions about processing, data subject requests or the agreements.
[email protected]Need a security pack for your review?
Tell us your requirements and we will share the security and infrastructure documentation for procurement and compliance reviews, and recommend the right setup.