Data and security in MndUP (mndup.com)
Each organisation decides where its data may be processed, and MndUP enforces that choice on every model call.
Each organisation chooses where its data may be processed.
There are three settings: anywhere (the default), EU only, or only on a dedicated computer with the local edition. The setting is enforced on every model call. Web and public-register lookups, and connectors you turn on (webhooks, Drive, storage exports), send their requests to those outside services.
Multi-factor authentication is available for every account.
Roles decide who can see, run and approve.
Each decision is saved in a sealed record.
It holds a hash, an audit chain and a signature, and can be exported.
MndUP is hosted in the EU (AWS eu-west-1).
Cloud AI models that process your content do so as processors on your organisation's behalf, and only as your setting allows.
A data processing agreement is available on request.
The privacy notice lists what is stored and your rights. Read the privacy notice.