Privacy & security
Enterprise-grade security.
Your data stays within your company’s boundaries. Lhotse is built for the security and compliance standards of the largest companies in Europe.
Foundations
Certified, compliant and hosted in the EU.
ISO 27001
Certified information security management.
GDPR compliant
Full compliance with European data protection.
Hosted in the EU
All data is processed and stored within the European Union.
Audit-ready
A complete audit trail and compliance documentation.
Your data
Read and written in place.
Lhotse works inside your systems. Requests, events and orders are created where your data already lives, so nothing is copied into another silo.
- Your systems remain the system of record
- Access defined by your IT team
AI
AI you can explain.
Every agent action is logged with its inputs and its reasons. People decide where a decision needs them, and every recommendation can be traced back.
- Every action logged and explainable
- People in the loop where decisions need them
Access
The right people, the right rights.
People see what their role allows, in the tools they already use. Suppliers answer through a link that only opens their own request.
- Supplier links scoped to one request
Documentation
Everything your security review needs.
We share our security documentation with your security and procurement teams on request.
Request documentation- ISO 27001 certificate
- Data processing agreement (DPA)
- Technical and organisational measures (TOMs)
Contact
Talk to our security team.
- Security
- security@lhotse.de
- Data protection officer
- datenschutz@heydata.eu