Enterprise-grade Security. GDPR by Design.

Built for compliance officers, DPOs, and legal teams. Every layer is designed with data protection at its core.

Contact Security Team

Full documentation: security.hanc.ai

A heavy graphite vault door with an orange-to-pink ring of light glowing in its seam
A dark shield ringed with the EU stars, lit in orange and pink

EU Data Hosting. EU-First Processing.

Data is stored in the EU and core processing runs in EU data centers.

  • Hetzner & Azure EU

    Primary infrastructure on Hetzner (Germany) and Azure EU. ISO 27001 certified.

  • Encryption at Rest & in Transit

    AES-256 at rest by our infrastructure providers. TLS 1.2/1.3 for web and API traffic.

  • Transparent International Transfers

    International transfers exist and are documented per provider in our compliance documentation, available at security.hanc.ai.

Built for GDPR Across All 24 Roles

Every voice agent role is built with GDPR compliance as a core function, not an add-on.

  1. Recording Off by Default

    Call recording is disabled unless the customer enables it. Recording notice is configurable per agent and market.

  2. Data Deletion on Request

    Cascading account deletion and per-record deletion via the platform and API.

  3. Right to Access

    Full data export capabilities in machine-readable format.

Anti-Hallucination by Design

Every response is grounded in your verified knowledge base.

  • RAG-Based Responses Retrieval-Augmented Generation ensures grounded answers.
  • Confidence Scoring Real-time confidence assessment. Low confidence triggers escalation.
  • Escalation to Human Automatic handoff when AI reaches knowledge boundaries.
The knowledge base screen of the Hanc dashboard: documents an agent answers from, with search and filters The knowledge base screen of the Hanc dashboard: documents an agent answers from, with search and filters

Employee Data Protection

Special protections for internal-facing agent roles (M1-M10).

  • Works Council Compatible

    Designed for Betriebsrat compliance in DACH markets.

  • Minimal Data Collection

    Only strictly necessary data. No employee profiling.

  • Separate Data Handling

    Employee data stored separately with stricter controls.

  • Bruno, AI secretary, smiling in glasses and a headset, grey blazer
    Bruno
    Executive Secretary
  • Malik, AI scheduling coordinator with locs and beard, smiling in a black headset
    Malik
    Coordinator
  • Clara, AI internal helpdesk agent, blonde with glasses, explaining calmly in a headset
    Clara
    Internal Helpdesk
  • Kai, AI data collector, smiling young man in a navy overshirt wearing a headset
    Kai
    Data Collector
  • Finn, AI approval agent, red-haired man with a beard, arms crossed, wearing a headset
    Finn
    Approvals
  • Rafael, AI dispatcher, bald man with a salt-and-pepper beard, smiling, wearing a headset
    Rafael
    Dispatcher
The internal team: ten roles that work with your staff rather than your customers.

Built for European Data Protection Law

One platform, built for European data protection law. We operate under the GDPR and the equivalent regimes of the United Kingdom and Switzerland.

GDPR
European Union, General Data Protection Regulation
revDSG
Switzerland, Revised Federal Act on Data Protection
UK GDPR
United Kingdom, UK GDPR

Certifications

Our infrastructure and payment providers hold industry-standard certifications. Hanc.AI's own technical and organisational measures are documented and available for review on request.

  • Hetzner ISO 27001 Infrastructure hosted on ISO 27001 certified data centers
  • Stripe PCI Payment processing through PCI DSS Level 1 certified Stripe

Have compliance questions?

Our security team is ready to support your due diligence process.

Contact Security Team Hire an AI employee