What security certifications does FortisEU have?

We do not currently claim ISO 27001 or SOC 2 certification. We are aligning controls with ISO/IEC 27001 and working toward SOC 2 readiness. We can share a security overview and selected policies on request.

Where is FortisEU data stored?

FortisEU is EU-hosted by default. For subprocessor details, chosen regions, and deployment constraints, request a security package and we will share what is available for your procurement process.

Can I download FortisEU compliance documents?

You can download a public security overview from the Trust Center. For additional documents (DPA, subprocessor list, architecture summary), request a security package and we will respond with the next best step.

Trust Center

Security and privacy your procurement team can move with.

Start with what we can share publicly, then request a security package tailored to your review process.

Download overview

Request security package Create account

EU-hosted by default. Ask about self-hosted and air-gapped deployment for strict sovereignty requirements.On-premise and air-gapped deployment is available in the Enterprise plan.ASK does not train on your tenant data.

Procurement Fast Path

What we can share publicly

No fake badges. No synthetic metrics. If you need something specific for vendor due diligence, request it and we will respond with what is available for your process.

Security overview (PDF)

High-level security and privacy overview suitable for initial vendor screening.

Open

DPA and privacy docs

A clear view of our privacy posture and processing terms.

Open

OpenAPI spec + API surface

Reference the current versioned API spec and implemented endpoint inventory.

Open

Need a subprocessor list or deployment details?

Request a security package and tell us what your procurement team needs.

Request package

Request

Request a security package

Tell us what you need for due diligence. We will reply by email with the next best step.