EU data residency
All personal data is stored and processed in AWS Europe (Stockholm), eu-north-1. Transcripts, scores and analysis stay inside the region.
Your calls never leave the region.
Future Ready is built for Nordic contact centres that answer to GDPR. Every recording is transcribed on models we host, redacted before it is stored, scored in-region, and kept inside the EU end to end.
eu-north-1EU data residency
ISO 27001Independently audited ISMS
Self-hosted STTNordic speech, no third-party API
How we protect your data
Privacy and residency are the foundation the platform is built on, not features bolted on afterwards.
Self-hosted transcription
Norwegian and Swedish are transcribed on speech models we run ourselves on EU infrastructure. Audio is processed in memory and never persisted, and no third-party transcription service ever sees it.
PII redaction that can't fail silently
Names, numbers, emails and addresses are stripped from every transcript before it is stored. If redaction can't be applied, the transcript is blocked rather than saved.
Encrypted throughout
TLS in transit and AWS KMS-managed keys at rest, across databases, storage and logs.
Least-privilege access
Role-based access with tenant isolation between organisations. Sessions use short-lived tokens, with no long-lived credentials held in the browser.
Tested continuously
Static analysis and dependency scanning gate every change, managed threat detection and tamper-evident audit logs run in production, and independent penetration tests run every year.
One region, from the call to the score.
Every step happens inside the EU, and raw audio is never retained.
EU data centre · eu-north-1Your data never leaves the region
Call captured
TranscribedNordic · self-hosted
PII redactedbefore storage
Scoredon your rubric
Stored in-regionencrypted
Your conversations are never used to train models.
Language models run through AWS Bedrock in EU regions. Content is processed transiently to produce a result. It is not stored by the model provider, and it is never used to train models.
Independent assurance
ISO/IEC 27001:2022
Our ISMS is independently audited. Certificate and Statement of Applicability available on request.
Annual penetration tests
Independent third-party testing of internet-facing apps and APIs, with retests on high-severity findings.
Continuous monitoring
Managed threat detection and tamper-evident, encrypted audit logs run in production.
SOC 2 via our providers
Our core infrastructure providers are SOC 2 audited. Future Ready's own assurance is delivered through ISO 27001 and annual penetration tests.
We work with a small set of carefully vetted sub-processors, each bound by a data processing agreement and kept in-region wherever possible. Our current sub-processor list and full DPA are available on request.
Security questions before you commit?
We'll walk your security and procurement teams through our controls, share our ISO 27001 certificate and DPA, and complete your security questionnaire.
Data protection & securitypost@futureready.no