Security & Compliance

Certifications and audits

B2B buyers conducting vendor due diligence will ask for evidence of third-party security audits. We list only certifications we actually hold.

If you are conducting a procurement security review and need documentation, contact us — we'll provide what we can and be honest about what we don't have yet.

Where your data lives

Memesis AI SRL is a Romanian-registered company. Our customer base is primarily EU-based.

RaaS customers

Your data is processed within the EU. Detailed hosting region and provider information is available on request for procurement purposes.

Cross-border transfers

Any data transfer outside the EU/EEA is governed by GDPR Art. 44–49 lawful transfer mechanisms. Details available on request.

For your specific deployment's detailed data residency documentation, contact us.

GDPR compliance

Memesis AI SRL is a Romanian-registered company and processes personal data on behalf of EU-based customers. GDPR applies as a matter of law.

Verified fact: Memesis AI SRL is registered in Romania (EU member state). GDPR applies to all personal data processing. The following data subject rights are defined in the Regulation and cannot be waived.

Your data subject rights

Right of access (Art. 15)

You can request a copy of the personal data we hold about you — what it is, where it came from, who we've shared it with, and how long we intend to keep it.

Right to rectification (Art. 16)

If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct it.

Right to erasure (Art. 17)

You can ask us to delete your personal data in certain circumstances — for example, if we no longer need it for the purpose it was collected, or if you withdraw consent.

Right to object (Art. 21)

You can object to processing based on legitimate interests or for direct marketing. We must stop unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, contact us at office@memesisai.com and mark your message "DPO enquiry." We will respond within 30 days, as required by GDPR Art. 12.

Data Protection contact

For data subject rights requests, DPA enquiries, or any question about how Memesis AI processes personal data:

Memesis AI SRL

office@memesisai.com

Mark your message "DPO enquiry" for data-subject requests.

Supervisory authority

Memesis AI SRL is registered in Romania. The competent supervisory authority for data protection complaints is:

ANSPDCP

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Website: www.dataprotection.ro
Address: B-dul Magheru nr. 28-30, Sector 1, București, Romania
Email: anspdcp@dataprotection.ro

You have the right to lodge a complaint with ANSPDCP at any time if you believe your data has been processed unlawfully. You also have the right to an effective judicial remedy against the supervisory authority or the data controller.

Sub-processors

A sub-processor is any third-party company that processes customer personal data on Memesis AI's behalf. The following tools are used on the Memesis AI website and in our operations.

Provider	Service	Data location	Privacy details
Google (Tag Manager & Analytics)	Website analytics and tag management	EU (with SCCs)	Google Privacy Policy
Cookiebot by Usercentrics	Cookie consent management	EU (Denmark)	Cookiebot Privacy Policy
Microsoft Azure	Website hosting, Application Insights, backend infrastructure	EU	Microsoft Privacy Statement

For RaaS deployments, additional sub-processor documentation is available on request. Enterprise buyers requiring a full DPA can contact us at office@memesisai.com.

Customer data handling

These are the principles that govern how we treat data you give us to run your automations.

You own your data

Customer data — including documents, records, and outputs processed by your robots — belongs to you. Memesis AI does not use your operational data to train models or share it with third parties outside the sub-processor list above.

Data export

You can request an export of your data at any time. Contact us at office@memesisai.com to initiate an export request for your account's data.

Deletion on termination

When your contract ends or you request deletion, we delete your data and can provide written confirmation of deletion on request. Contact us for the specific timeline applicable to your contract.

Audit trail

Every action taken by a Memesis robot or AI Agent is logged. This is a function of how Memesis Orchestrator works — not a marketing claim.

How Orchestrator logging works: Every robot execution records which robot ran, when, what inputs it received, what actions it took, what outputs it produced, and whether it succeeded or raised an exception. Exceptions and human-in-the-loop escalations are logged separately for review.

Log access

Logs are accessible and exportable through Memesis Orchestrator. If your auditor, regulator, or internal compliance team needs a log export in a specific format, contact us to confirm what is available.

For regulated industries

If your industry requires extended log retention or specific audit formats (banking, healthcare, insurance), contact us to discuss your requirements before signing. We'll confirm what is supported.

DPO enquiry or data subject request

For data subject rights (access, rectification, erasure, objection), DPA requests, or any GDPR enquiry — email us and mark your message "DPO enquiry."

office@memesisai.com

Procurement due diligence

For vendor security reviews, procurement documentation, or regulated-sector onboarding — contact us with your specific requirements and we'll respond within one business day.

Contact us

Where your data lives, who can see it.