Trust Center

Built EU-first — the compliance moat is the product

European shippers need European law, European data residency and a paper trail your auditor recognises. Every claim below is copied from the detailed page it comes from — follow the link on each card to read the full policy.

EU-hosted (Frankfurt) GDPR / DSGVO GoBD-aligned audit trail No client data trains AI RLS tenant isolation VAT / VIES validated DPA available (Art. 28)

Security overview →

You choose your data region — EU or US — when you onboard. Each organisation's data is hosted entirely within its region (EU: AWS eu-central-1, Frankfurt) and never crosses regions.

Read the security overview

Source: /security.html

Data governance & residency →

No training on customer data. Up-to-30-day Anthropic retention. Per-call audit log. EU or US data residency. Row-Level Security ensures only users in your organisation can read or write your data.

Read the data-governance policy

Source: /data-governance.html

AI reliability & audit logging →

Every AI call, pipeline run, and dispute action is logged with a SHA-256 identity hash and the exact policy version that produced it — the kind of evidence chain SOX, GoBD, and ISO 27001 reviewers expect. Human in the loop for anything that affects money.

Read the AI-reliability page

Source: /ai-reliability.html

EU AI Act Art. 14 oversight brief →

Printable one-pager for procurement reviewers. Human-in-the-loop architecture mapped to the EU AI Act's human-oversight requirement (Article 14, applicable 2 August 2026). Oracron is designed for human oversight and Art. 14-ready — certification is a separate, evolving process.

Download the procurement brief

Source: /ai-oversight-brief.html

VAT / VIES validation →

Live VAT-number validation against the EU VIES service is a first-class Sentra module — every customer and supplier VAT number is verifiable at ingestion time, not left to a spreadsheet after the fact.

See the VAT validation module

Source: /sentra.html

Data Processing Agreement (Art. 28) →

Oracron's DPA v1.0 — GDPR Article 28 compliant. Sub-processors, retention, encryption, breach notification, customer rights.

Read the DPA

Source: /dpa.html

Governance hub →

Procurement-facing discovery surface: DPA, privacy policy, security overview, security.txt, data-governance details, AI oversight brief — one link for the review team.

Open the governance hub

Source: /governance.html

EU GDPR freight audit →

Detailed page on how the EU freight-audit workflow specifically meets GDPR expectations — data subjects, retention, cross-border transfer basis, records-of- processing (Art. 30).

Read the GDPR freight-audit page

Source: /eu-gdpr-freight-audit.html

Nothing on this page is new. Every claim is copied from the source page it links to; the existing per-page URLs are preserved so inbound links, procurement bookmarks and search-engine placements keep working. Compare with U.S. / LatAm-hosted competitors: what's a nice-to-have on their marketing page is a hard requirement for your compliance team. Questions? hello@oracron.app or reach us via /contact.