Differentiator
Most regulatory AI tools are thin wrappers around third-party APIs that require your policies to leave your perimeter. Regumeter can run as a self-hosted, offline-capable deployment inside the client environment (AWS, Azure or on-premise), in addition to shared SaaS.
Shared SaaS remains available where multi-tenant economics are acceptable. The choice is deliberate: banks and critical operators often cannot buy an API wrapper.
Data residency and hosting
- Primary SaaS processing in the European Union.
- Self-hosted deployments keep application data inside the customer’s chosen region and VPC / on-prem network.
- Azure West Europe — SaaS cloud region for Regumeter hosting topology.
Client data and model training
Regumeter does not train foundation models on client documents or chat content. Client materials are used only to provide the contracted service (scanning, mapping, workflow).
Authentication and access
- Enterprise SSO / SAML supported for tenant access control.
- Role-based access for compliance owners, reviewers and read-only auditors.
- Microsoft Entra ID — primary IdP compatibility for enterprise SSO.
Audit trail and retention
- Workflow records retain who approved which policy change and which regulatory source triggered it.
- Retention periods are configurable per tenant.
- Default retention and deletion follow applicable legal requirements (including GDPR storage-limitation principles) and customer contractual instructions; data is deleted or anonymised when no longer required for the stated purpose or upon contract end, subject to mandatory retention law.
Incident process
Security incidents affecting Regumeter SaaS are handled under Greenometer’s incident response process, with customer notification according to contractual and legal obligations.
Contact: customer.support@greenometer.com
Subprocessors
List for SaaS. Self-hosted deployments may eliminate some rows.
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting / Static Web Apps / related cloud services | West Europe |
| Cloudflare | Turnstile bot protection on lead forms | EU / global edge |
| OpenAI | LLM / inference (DPA in place) | Per DPA / EU data controls |
| Anthropic | LLM / inference (DPA in place) | Per DPA / EU data controls |
Questionnaires and artefacts
For SIG / CAIQ / custom bank questionnaires, contact the Regumeter team via customer.support@greenometer.com. We prefer completing your template over inventing public certification badges.
Book a security review call