For auditors

Compliance package

The documents we publish today, in one place. Each links to a real artefact; we do not claim certifications we do not hold.

Data Processing Addendum

GDPR Art. 28 DPA with SCC Module Two.

Privacy notice

What personal data we collect, why, and your rights.

Sub-processors

Third parties that process customer data on our behalf.

Cookie policy

Categories of cookies and how consent is managed.

AI Act statement

Our role under Regulation (EU) 2024/1689.

Records of processing

GDPR Art. 30 template for your DPO.

Need more?

Security questionnaires, custom DPA or SLA amendments: write to legal@odnoga.com and we will tell you what we can share today. We do not yet hold our own SOC 2 report or an independent penetration-test report — the certifications listed on the security page belong to our sub-processors.