ISO/IEC 27001:2022Information security managementCI-23461/2026 · valid until 2028-03-16
CertifiedPDFTrust Center
Certifications, data handling, and the controls behind everything we ship - in the open, for your security team.
ISO 27001, 14001 and 9001 certifiedSelf-hosted by design - your data stays on your hardwareGDPR-aligned data handling
Certifications
Independently Certified
The Intelligence Company AB (publ), the company behind Truespar, is audited and certified by an accredited registrar. Download the current certificate for each standard.
Where Your Data Lives
On Your Hardware
Product data
The products install as single binaries and run inside your own network. The data they store, index, and serve stays on your hardware - it does not flow through Truespar.
What we hold
The little we hold ourselves - accounts, downloads, and live demo traffic - is processed on hardware we operate in Sweden, within the EU/EEA.
GDPR
Built Under GDPR
We build and operate from Sweden, so Truespar is designed under GDPR from day one - among the world's most stringent standards for data privacy. The same strict default protects every customer, wherever they work. And because the engines are self-hosted, the strongest protection is structural: for product data, there is nothing for us to process.
Security Controls
What We Do, Line by Line
The controls behind the products and this website, grounded in how they are actually built.
Products and data boundaries
- Every engine runs on your own hardware, inside your own network
- Single-binary installs with no cloud dependency to operate
- The data your engines store and serve never flows through our servers
- API-compatible with the tools they replace, so migrating does not mean handing your data to a new cloud
Release integrity
- Release binaries are Authenticode-signed by The Intelligence Company AB (publ)
- Signatures carry RFC 3161 timestamps, so they stay valid past certificate rotation
- Releases are built and distributed from infrastructure we operate ourselves
Website privacy
- No cookies on truespar.com - no tracking, analytics, or advertising
- No third-party CDNs: fonts, scripts, and styles are self-hosted
- The contact form uses a cookieless proof-of-work challenge, not a tracking CAPTCHA
- Preferences like theme are kept in your browser and never sent to us
Live demos
- The Paddock demo runs on GPU hardware we operate in our own production
- Demo chats are ephemeral: nothing is saved, and a reload starts clean
- Demo prompts are processed only to generate the reply and are never used to train models
Data protection
- Encrypted in transit across the site and every API
- We collect the minimum needed for an account and nothing more
- GDPR-aligned handling, with rectification and erasure on request
Certifications and compliance
- ISO 27001, 14001 and 9001 certified
- Audited by an accredited registrar, with certificates published below
- GDPR-aligned data handling under Swedish and EU law
Report a Vulnerability
Found a security issue in a Truespar product or on this website? We want to hear from you. Email security@truespar.com and we will respond promptly. We support coordinated disclosure and will not pursue good-faith research.
Reviewing Truespar for your security team?
We will walk through the self-hosted model, release signing, and our controls in detail, and share any documentation you need.
Talk to us