Skip to main content
TRUST CENTER · LAST UPDATED 9 SEP 2026

Trust & Security Portal

Architected for Zero Data Retention. Designed with GDPR principles and EU AI Act transparency. Velora is operated by Growth Marketing srl (P.IVA 09899971213). See our detailed controls, subprocessors and data lifecycle below.

Infrastructure: EU-West1 / EUEncryption: TLS 1.3 / AESCode Retention: 0 Days (RAM)Model Training: None

Data Processing Architecture

RAM-only Gateway

Context payloads are processed in volatile memory and discarded after streaming. No prompts, code or outputs are written to disk.

Zero Training Policy

Customer code is never used to train, fine-tune or evaluate models. Upstream providers are configured with no-training controls where supported.

Data Residency & Sovereignty Tiers

TierRoutingLoggingJurisdiction
StandardGCP EU regions (Frankfurt)RAM-only core, provider logs per upstream policyEU
velora-zdrRegolo AI EU GPU clusters (Frankfurt / Milan)Intended zero-disk loggingEU

Subprocessors

ProviderServiceLocationTransfer Mechanism
Google CloudCore infrastructureEU—
Regolo AIZDR GPU inferenceEU DE/IT—
Vercel Inc.Website hosting & analyticsUSAEU-US DPF
Airtable Inc.Lead storageUSAEU-US DPF
Resend Inc.Transactional emailUSASCC
Google LLCreCAPTCHA v3USAEU-US DPF
Stripe Inc.PaymentsUSA/EUDPF / SCC

Technical & Organizational Measures

  • TLS 1.3 in transit with modern cipher suites.
  • RAM-only processing for context payloads; no persistent storage of prompts.
  • Bearer token authentication, IP-based rate limiting, reCAPTCHA anti-abuse.
  • Log sanitization: automatic redaction of payloads, retention max 30 days for security logs.
  • BYOK support for customers bringing their own provider credentials.

Data Retention

AI context payloads: 0 days (ephemeral RAM)
Beta signup leads: up to 24 months or deletion request
Contact messages: 12 months after resolution
Security logs / IPs: max 30 days

EU AI Act Transparency

Velora acts as a technical optimization gateway. We do not modify model outputs to generate synthetic media or influence decision-making. We provide transparency on compression metrics and upstream provider usage as required by Article 50.

Legal & Requests

Data Controller: Growth Marketing srl — Velora
P.IVA 09899971213 — Via Ponte di Tappia, 47, Naples, Italy

Need a Data Processing Agreement or Security Questionnaire? Submit via contact form.