Trust center
Security, compliance and data residency
Pathwize is EU-native from the data layer up. Here's how we handle security, where your data lives, who processes it, and your rights.
Security controls
Data residency
Personal & project data stored and processed in the EU by default.
Encryption
TLS 1.2+ in transit; encryption at rest.
Access control
Role-based access; least privilege; audit logging.
Provenance
Hash-chained, tamper-evident per-task audit trail.
Sandboxing
No-download annotation workspace for sensitive data.
Worker classification
Jurisdiction-correct engagement of experts.
Certifications
Status
Subprocessors
Who processes data
Supabase
Database & storage
Clerk
Authentication
Stripe
Payments (Connect)
Anthropic (Claude)
AI drafting & scoring
Resend
Transactional email
Vercel
Hosting
Supported countries
EU & EEA by default
Expert engagement and data residency default to the EU/EEA. 30 countries supported.
Your GDPR rights
Access, export, erasure
- · Access and export your data at any time.
- · Request rectification or erasure.
- · Provenance events are pseudonymized on erasure to preserve dataset integrity.
Experts manage requests in the portal's data-rights area.NoteDocument text marked “placeholder” awaits counsel review.
Make your AI-Act documentation a non-event
Every batch ships with an Annex-IV-ready provenance bundle. Run a pilot and see one.
Vendor-neutral · your data stays your IP