Compliance
Built for EU law.
In plain words: which EU rules apply when you use Fundarem, what Fundarem does about each, and a link to the official text.
Where this fits Compliance is one of the four problems Fundarem works on, next to connected systems, linked data and AI that understands your business. This page shows what it means for a business in the EU and the EEA.
This page explains how the product is designed. It is not legal advice, and it does not replace your own assessment. We are in an early design-partner phase.
Seginus AS, org. nr. 924 867 558
EU law
The EU rules
These are the EU rules that matter when you use Fundarem, wherever your business is in the EU. Norway and Iceland are not in the EU but are in the EEA: there, EU rules apply once they are taken into the EEA Agreement and national law.
Read itWhere your data lives
Fundarem is not a shared cloud service. The product is designed as a package installed in your own Microsoft Azure tenant, in an EU region you choose; the install template defaults to a region in Norway. Your database, files, credentials and AI model deployments are resources in your subscription, on your bill.
Read itController and processor
Under the GDPR, you are the controller of your data when you use Fundarem. Where we operate or support your installation, we act as your processor, and GDPR Article 28 requires a written data processing agreement (DPA) between us before that processing starts. We do not have a one-size-fits-all DPA already signed for every visitor to this page — we put one in place with you, built on the same terms below.
Read it
Compliance documents
The documents at a glance
How data flows
The path your data takes, from your own systems to a screen and back, and where personal data can be masked.
Read itDPIA
The impact-assessment template (GDPR art. 35), filled in with what the product itself does.
Read itData processing agreement
Our data processing agreement (GDPR art. 28). Each customer signs it with us before any processing starts.
Read itSub-processors
The companies we engage that may process personal data, what for and where.
Read itRetention
What the product keeps and for how long, and where to find each country’s minimums for accounting records.
Read itData-subject rights
How each GDPR right (art. 15 to 22) is answered, and how to complain to the data protection authority in your country.
Read itLegal basis
Which law applies, and the legal basis for each kind of processing.
Read itAI Act
What Fundarem is under the AI Act, which applies directly in the EU and, in Norway and Iceland, once it is taken into the EEA Agreement, and what that means for you.
Read itEU law: the sources
What the GDPR, the AI Act, the Schrems II ruling and NIS2 say, point by point, each with a link to its official text.
Read it
Background
Security controls
These are built into the engine and the install package now:
Read itThe platform underneath
Because Fundarem is built to run in your own Azure subscription, Microsoft’s commitments to you apply directly, under your own agreement with Microsoft:
Read itAll official sources
This page explains how the product is designed. It is not legal advice, and it does not replace your own assessment. We are in an early design-partner phase.
Read it
Next in the story
Questions from your DPO or lawyer?
We would rather answer them before you install anything.