Skip to content
Legalithm logoLegalithm logo
AssessmentProductPricing
Contact
Log inGet started
  • Assessment
  • Product
  • Pricing
  • Resources
    • Blog
    • AI Act Guide
    • Quick Risk Quiz
    • Deadline Tracker
    • Templates
    • Downloads
  • Contact
  • Log in
  • Get started
Legalithm logoLegalithm logo

Practical AI Act compliance workflows for startups and SMEs. Classify risk, map obligations, and generate documentation outputs faster.

hello@legalithm.com•security@legalithm.com

Free-launch mode active: start with the public assessment and join founding access for paid rollout updates.

Product

  • Overview
  • AI Act Assessment
  • Quick Risk Quiz
  • Deadline Tracker
  • Pricing
  • Founding Program

Solutions

  • Legal Teams
  • Privacy & DPO
  • Technology Leaders

Resources

  • Blog
  • AI Act Guide
  • Templates
  • Free Downloads

Company

  • About
  • Careers
  • Contact
  • Press
  • Privacy Notice
  • Terms of Service
  • Cookie Policy
  • DPA
  • Subprocessors
  • Acceptable Use
  • AI Transparency
  • Accessibility
  • Imprint
© 2026 Legalithm. Built for EU AI Act & GDPR assurance.
Loading consent preferences...
Trust Center

Trust, Security, and Compliance Transparency

Key information for evaluating Legalithm’s security practices, compliance posture, and AI transparency approach.

GDPR Compliant
EU-Hosted (Frankfurt)

At-a-glance

  • • EU-focused hosting for launch operations
  • • Encryption in transit and at rest
  • • Consent-aware analytics and privacy-first defaults

Contact

  • • Security: security@legalithm.com
  • • Privacy & DPO: dpo@legalithm.com
  • • General: hello@legalithm.com
    Home/Trust Center

Security

Encryption, network architecture, incident response, and penetration testing cadence.

View details →

Compliance

EU AI Act and GDPR-aligned documentation, controls, and policy references.

View details →

Availability

Service status, disaster recovery, uptime guarantees, and infrastructure locations.

View details →

AI Transparency

Model governance, EU AI Act risk classifications, human oversight, and evaluation.

View details →

Privacy & DSAR

Data processing, retention, DSAR workflow, and data subject rights commitments.

View details →

Legal & Policies

Master Agreements, DPA, cookie policy, accessibility, and regulatory disclosures.

View details →

Security Controls

Legalithm is designed with defense-in-depth principles across infrastructure, access management, monitoring, and secure delivery practices.

Encryption Everywhere

  • TLS 1.3 in transit, AES-256 at rest
  • Key-management best practices for sensitive data
  • Access controls to limit privileged exposure

Network Architecture

  • Production isolation and least-privilege access principles
  • MFA-enabled internal access workflows
  • Layered protections for perimeter and application traffic

Security Operations

  • Monitoring, alerting, and incident triage workflows
  • Periodic security testing and remediation tracking
  • Documented response playbooks for operational incidents

Bug Bounty & Responsible Disclosure

  • Coordinated vulnerability disclosure process
  • Risk-based response prioritization for high-severity issues
  • security@legalithm.com for disclosures

Compliance & Certifications

Review active policy pages and compliance documentation relevant to the current launch scope.

GDPR Compliance

Active

Privacy by design, data minimization, and full data subject rights support.

View documentation →

EU-Hosted Infrastructure

Active

All data stored and processed in Frankfurt, Germany (Supabase EU).

View documentation →

GDPR Art. 28 DPA

Active

Data Processing Agreement covering processor obligations and contractual safeguards.

View documentation →

EU AI Act Readiness

Active

Risk classification methodology and transparency documentation for launch workflow.

View documentation →

AI Transparency & EU AI Act Compliance

Legalithm documents AI-assisted workflow behavior to support EU AI Act transparency, risk management, and human oversight expectations.

Model Inventory & Risk Classification

  • AI
    AI-assisted classification supports unacceptable, high, limited, and minimal risk outcomes.
  • AI
    Results include rationale and legal references for reviewer validation.
  • AI
    Workflow outputs are designed for operational use, not final legal determination.
Read AI transparency policy →

Human Oversight & Evaluation

  • AI
    Every AI output requires human review prior to enforcement.
  • AI
    Critical decisions should be validated by qualified legal/compliance stakeholders.
  • AI
    Transparency language is included across user-facing AI output touchpoints.
Read AI transparency policy →

Transparency & Documentation

  • AI
    AI usage and limitation disclosures are surfaced in product flows.
  • AI
    Documentation outputs include context for legal and procurement review.
  • AI
    Policies are maintained on trust and legal pages for external verification.
Read AI transparency policy →
Trust Center - Legalithm