Security and data handling

Who is accountable

ZeroTask is run by a systems and security engineer. Security decisions are made by the person who builds your solution, not handed to a third party.

Access

• Each automation gets its own credentials with only the permissions it needs.
• Access is given on accounts you control wherever possible, and removed when the project ends or when you ask.
• Secrets such as API keys are stored in the automation platform, never in documents, chat or code.

Where data is stored

[CONFIRM: server location — EU? which provider and region? Replace this paragraph with the confirmed statement before publishing.]

Where possible, solutions run on infrastructure that is documented in the handover, so you know which systems hold your data.

AI providers and your data

When a workflow uses an AI model, the relevant data is sent to the model provider for processing. For each project we:

• tell you which provider is used and what is sent to it;
• send only the data the task needs, and redact personal data where we can;
• choose provider settings that do not train on your data, and put this in the proposal;
• use data-processing agreements and EU processing options where the provider offers them.

GDPR

For most projects ZeroTask acts as a processor of your data under a data-processing agreement, and you remain the controller. We help you document what the automation does with personal data, so you can include it in your records of processing. We are not a law firm, so for legal questions we recommend that you involve your data-protection adviser.

When something goes wrong

• Every run is logged, and failures raise alerts.
• Agents hand over to a person when they are unsure, and sensitive steps can require approval.
• If we find a problem that affects your data, we tell you without delay and explain what happened and what we changed.

Documentation and ownership

Every workflow is documented: what triggers it, what it does with data, which systems it touches, and how to maintain it. The solution is yours, and you can move it to another provider at any time.

Questions about security

If your company has a security questionnaire or specific requirements, send it with your message and we will answer it before the proposal.