1. Who We Are
Erfüllen provides a compliance workflow platform for AI governance, EU AI Act readiness, evidence tracking, document generation, MLOps monitoring, and related compliance operations. References to "Erfüllen", "we", "our", or "us" mean the provider of this platform.
2. Data We Process
We process account and workspace information, organization membership data, AI system metadata, risk classification inputs, evidence records, uploaded files, generated document drafts, audit logs, billing and plan information, integration settings, webhook events, and support/contact requests.
3. Erfüllen Engine, Claude, and Gemini
The Erfüllen Engine powers risk reasoning, compliance document drafting, and workflow assistance. Depending on configuration, the Erfüllen Engine may use Claude by Anthropic and Gemini by Google as underlying model providers. Information submitted for classification or document generation may be sent to these providers to produce AI-assisted output. Generated content is a draft and must be reviewed by your responsible human reviewer, legal team, DPO, or compliance officer before regulatory filing or external submission.
4. Why We Use Data
We use data to provide the service, authenticate users, enforce tenant access controls, classify AI systems, generate and manage compliance documentation, calculate compliance readiness, process evidence approvals, monitor MLOps events, send alerts, provide support, maintain security, and improve reliability.
5. Integrations and Webhooks
If you connect MLflow, Weights & Biases, SageMaker, or another MLOps source, Erfüllen receives event payloads needed to identify model versions, stage or alias changes, metrics, and monitoring signals. We use this data to create monitoring events, trigger reassessment workflows, and help maintain compliance records.
6. Sharing and Processors
We share data with service providers only as needed to operate the platform, including hosting, database, authentication, billing, email delivery, monitoring, and AI model providers. We do not sell customer data. Where AI providers are used, they are used to support the Erfüllen Engine features selected by your workspace.
7. Security and Tenant Controls
Erfüllen is designed for tenant-separated access using organization-scoped authorization, audit logs, role checks, and server-side data access. Customers remain responsible for choosing appropriate user roles, reviewing generated content, and avoiding uploads of unnecessary sensitive data.
8. Retention
We retain records for as long as needed to provide the service, satisfy audit and compliance needs, resolve disputes, enforce agreements, and meet legal obligations. You may request deletion or export subject to applicable contractual and legal limits.
9. Your Responsibilities
You are responsible for the accuracy of AI system metadata, the legality of uploaded evidence, obtaining required consents, performing human review, and deciding whether generated documentation is suitable for a regulator, notified body, customer, or internal audit.
10. Contact
For privacy questions, contact us through the in-app Contact us form or email hello@erfullen.ai.