Evidence, not promises.
Hura doesn’t replace your lawyers or your auditors. It produces the records they need, continuously, from the AI traffic itself.
Built for the rules your buyers already face.
- AI inventory
- Risk classification
- Usage logs
- Documentation drafts
- Data minimisation
- Redaction
- EU residency
- DPIA support
- Full audit trail
- Supplier-risk evidence
- Self-hosted exit option
- Access control
- Incident-ready logs
- Federated analysis
- No data transfer
How we handle your data
EU by default
Hosted in EU regions. Processing outside the EU only if you explicitly configure it.
Never used for training
Your prompts, documents and outputs are never used to train our models or anyone else’s.
Minimised
Personal data is removed before it reaches a model, and logs store only what you choose to keep.
Yours to take away
Export your logs and configuration at any time, or move to a self-hosted deployment.
Access you can see
Every access to your data by our team is logged and visible to you.
Contracts that match
Data processing agreement under GDPR article 28, and the contractual terms DORA asks of IT suppliers.
Where we are, plainly.
We will only list a certification here once it is awarded. These are the frameworks we are building towards.
ISO/IEC 27001
Information security management.
ENS
Spain’s National Security Framework, required to work with the Spanish public sector.
ISO/IEC 42001
AI management systems.
This page describes how Hura supports compliance. It is not legal advice.
Discretion is the product.
Join early access in minutes, or book 30 minutes with our team to plan a pilot.