How Caicle handles your data

The platform, its database and the agent sandbox run on servers in EU data centres operated by a European provider. Backups stay in the EU. The provider is listed in the subprocessor register and in your DPA.

Three kinds of data move through Caicle, and they move differently.

1. 01

   Account and workspace data

   Your users, settings, profiles and pipeline. Stored in the EU.

2. 02

   Company research data

   Fetched from public sources and the company's own filings. Stored in your tenant.

3. 03

   AI inference

   Prompts and research context are sent to a model provider to generate scores, summaries and plans. See the subprocessor register. Bring your own model key on any plan.

Changes are announced 30 days ahead by email to workspace owners.

Every plan includes a DPA under Art. 28 GDPR, accepted at signup and downloadable from Settings. Enterprise customers may sign a countersigned copy.

Annexes

• Subject matter, nature and purpose of processing
• Types of personal data and categories of data subjects
• Technical and organisational measures
• Approved subprocessors

• Output is marked AI-generated until you approve it
• Approval is logged with the approver and the time
• Reports carry a disclosure
• Person research is limited to professional roles
• Private-life data is out of scope by system rule

Row-level security in the database, not application filters. Every query runs inside the tenant's row-level policy, so a bug in application code cannot reach another tenant's rows.

Agents and the Ops Console run in an isolated container with no route to the database, no shell, and outbound access only through an allowlist proxy. Tenant MCP tools extend what an agent can reach without extending the blast radius.

Provider keys and MCP credentials are encrypted at rest and never returned by the API. A test probe confirms a connection without exposing the credential.

Only necessary cookies by default, under § 25 TDDDG and Art. 6 GDPR. Analytics is self-hosted and cookieless, and runs only after consent. Your choice is revocable from the footer at any time.

Report a security issue to start@teleroids.io. We acknowledge reports within two business days. Data-protection enquiries go to the address in the imprint.