Readiness status · Legal review required
GDPR readiness
Terra.ai does not claim blanket GDPR compliance or certification here. This page separates controls visible in code from legal and operational decisions that still need approval.
Current website controls
- The public form applies validation, a honeypot, a signed single-use challenge and rate limiting.
- Sensitive contact and email operations use server credentials; the browser does not receive the service key.
- Website administration checks a session and a server-side administrator list.
Work required before approval
- Confirm the legal controller, controller/processor roles, lawful bases and retention periods.
- Approve the subprocessor register, regions, DPAs and transfer mechanisms.
- Implement and test complete tenant isolation, export and deletion in the core, including files, derived results, benchmarks and backups.
- Document incident response, rights-request handling and retention exceptions with named owners.
Requests
The currently published channel is contact@humanaipro.com. This page promises no specific response period until the process, responsibilities and applicable requirements have been approved.