TRUST & SECURITY
Security, privacy, and operational controls.
D3x is built for CIO-led procurement at European hotel groups. GDPR-aligned architecture today, SOC 2 Type II in progress, and agent controls designed for operational risk.
COMPLIANCE
Status
GDPR·COMPLIANT
Architecture and infrastructure
SOC 2 TYPE II·IN PROGRESS
Target Q3 2026
ISO 27001·ON ROADMAP
Planned certification path
HIPAA·NOT APPLICABLE
Hospitality EU focus
DATA RESIDENCY
EU-hosted infrastructure
Customer data is hosted in EU infrastructure with per-customer isolation. Data is encrypted in transit (TLS 1.2+) and at rest.
DATA HANDLING
Training and retention
Customer data is not used to train third-party foundation models. Multiple LLM providers are used depending on workload; the model is not the product. Retention windows are configured per customer requirements and documented in the DPA.
ACCESS
Controls and provisioning
Role-based access control, full audit logs, and SSO support. SCIM provisioning is on the roadmap for enterprise deployments.
AGENT SAFETY
Operational controls
CONTROL 01
Human-in-the-loop
High-stakes channels operate as co-pilot. Staff review before send. Per-channel toggle.
CONTROL 02
Confidence thresholds
Escalation rules per workflow when the agent is unsure. Full audit trail on every decision.
CONTROL 03
Brand voice configuration
Per-property tone, vocabulary, and response style — hostel vs luxury aparthotel.
CONTROL 04
Phased deployment
Channel-by-channel rollout with property-type guardrails. Start narrow, expand on evidence.
Agent controls dashboard
Brand voice configuration
Audit log view
SUBPROCESSORS
Third-party services
| Service | Purpose | Region |
|---|---|---|
| Cloud infrastructure provider | Hosting & compute | EU |
| LLM API providers | Inference (no training on customer data) | EU / US |
| Messaging channel partners | WhatsApp, email delivery | Global |
SECURITY
Report a vulnerability
Responsible disclosure welcome. Contact security@d3x.ai for security reports and procurement questionnaires.
security@d3x.aiDOCUMENTS
Procurement pack
Documents not yet published — request during enterprise evaluation: security@d3x.ai
TALK TO US
Questions for your security review?
Book a call to walk through architecture, data flows, and controls with the team.
