GDPR
AvailableDPA, privacy, retention, and subprocessor information is available now.
Security and compliance
Molin AI trust center
Security, privacy, resilience, and compliance information for customers and their auditors.
Overview
Compliance
DORA support
AvailableDue-diligence material and contract support for financial-sector customers.
SOC 2 Type II
Coming soonExpected to be completed in Q3 2026.
ISO 27001:2022
Coming soonExpected to be completed in Q3 2026.
Infrastructure security
-
Encrypted data transmission and storage -
Restricted production and secrets access -
Backups, monitoring, and recovery procedures
Organizational security
-
Role-based access and least privilege -
Employee onboarding and offboarding -
Quarterly access reviews
Product security
-
Secure development and change review -
Dependency and vulnerability management -
AI data and output safeguards
Internal security procedures
-
Incident detection and response -
Business continuity and disaster recovery -
Vendor risk management
Documents
Read public documents now, or request access to selected internal policies.
Public
Security practices
Overview of our organizational, technical, development, and incident controls.
Data processing addendum
Data protection, transfers, subprocessors, and security obligations.
Privacy policy
How Molin collects, uses, shares, and protects personal data.
Subprocessor register
Providers, purposes, processing regions, and privacy links.
Data retention policy
Default retention periods and available customer options.
GDPR information
Data-subject rights and Molin data-protection information.
DORA support
Available evidence, recovery targets, assurance roadmap, and document requests.
Restricted
Loading document access…
Data flow
Provider, region, retention, and field details depend on the enabled product and customer agreement.
-
1
Ingress
Encrypted customer channels and integrations send data to Molin.
-
2
Processing
Cloudflare and Molin services validate, authorize, and process requests.
-
3
Storage
Required data is stored in approved databases and object storage.
-
4
AI inference
Enabled AI features send only required data to the configured provider.
-
5
Response and deletion
Results return to the authorized channel, with export and deletion handled under policy and contract.
Subprocessors
Third parties that support our service and may process relevant data.
AI and machine learning
Microsoft Azure OpenAI · Anthropic · OpenAI · Jina AI · Perplexity
Cloud infrastructure
Cloudflare · AWS · Google Cloud · DigitalOcean · Neon · Hyperbrowser · E2B
Analytics and monitoring
ClickHouse · Google Analytics · PostHog · Grafana
Payments
Stripe
Communication and support
Stytch · Slack · Rewardful · Customer.io
Developer tools
GitHub · Retool
Productivity and security
Google Workspace · 1Password
Updates
Trust center launched
Public assurance information and authenticated document requests are now available in one place.