Security
Trust.
Your data security and privacy are our top priorities. We've built ToldUntold with enterprise-grade security measures to protect your content, your teams, and your business intelligence.
This page says what we do, in plain words — including how our AI works and what happens to your data when it runs.
Your data
Your Data, Your Control.
We believe in complete data sovereignty. Your content, analytics, and business intelligence remain yours, always.
Data Residency
Your data is stored in secure European data centers with full compliance to EU data protection regulations and sovereignty requirements.
Data Encryption
AES-256 encryption at rest and TLS 1.2+ for data in transit. Your content and user data are protected with industry-standard encryption.
Access Control
Role-based permissions and multi-factor authentication. You control who has access to what, with granular permission management.
Single sign-on support and secure API access for seamless integration with your existing systems and workflows.
GDPR Compliant
Full compliance with GDPR regulations. We provide complete data portability, the right to be forgotten, and transparent data processing policies.
Regular Backups
Daily automated backups with point-in-time recovery capabilities. Your data is protected against loss with multiple redundancy layers.
Governed AI
How our AI works.
Every AI request on ToldUntold — a translation, a subtitle, an answer from TU Agent — runs through one gateway, operated by us. Each request is logged, attributable, and routed to the model best suited to the task.
Some models run on our own infrastructure; for others we work with carefully selected providers under strict contractual terms. Whoever the model belongs to, the rules are the same: your data is never used to train models — ours or theirs — and it stays under the controls described on this page.
The routing is set per capability. Translation, subtitles, dubbing, TU Agent’s answers, the structuring of imported content, the analysis of merchandising photos: each goes to the model service assigned to it. A maison can also connect its own LLM or its own AI services in place of ours, capability by capability, and keep those requests inside its own perimeter.
- One gateway — every request logged and attributable
- No training on your data, ours or any provider’s
- Model choice per task, changed without touching your data
- Bring your own model: a maison’s LLM or AI services, connected per capability
- The current provider list is in the security pack
China
Operating in China.
For our Full Mainland China Support option, we maintain separate infrastructure compliant with local regulations while ensuring the same security standards. Data stays within regional boundaries as required.
Questions
Security & Privacy Questions.
Where is my data stored?
All data is stored in secure European data centers with full GDPR compliance. We maintain strict data residency policies and never transfer your data outside the EU without explicit consent.
Which AI providers do you use?
We operate our own AI gateway. Depending on the task, a request runs on models we host or on selected external providers, under contracts that forbid training on your data. The full, current list of providers is available in the security pack.
How do you encrypt data?
We use AES-256 encryption for data at rest and TLS 1.2+ for data in transit. All connections are encrypted end-to-end, and sensitive data is encrypted with separate encryption keys managed through industry-standard key management systems.
Who has access to my data?
Only authorized personnel with explicit need have access to infrastructure. We implement strict role-based access controls, audit logging, and the principle of least privilege. Customer data is never accessed unless required for support with your explicit permission.
Do you perform security audits?
Yes. We conduct regular security assessments, vulnerability scanning, and maintain continuous monitoring of our infrastructure. We also work with security partners to ensure our platform meets the highest standards.
What about data backups?
We perform daily automated backups with point-in-time recovery capabilities. Backups are encrypted and stored in geographically distributed locations for maximum resilience.
Can I export my data?
Absolutely. You have complete data portability rights. We provide tools to export all your content, analytics, and user data in standard formats at any time.