Skip to main content

​
Trust starts with transparency

The Tuteliq Trust Center at trust.tuteliq.ai is where you can verify our security posture, compliance status, and data handling practices — all in one place.

Visit Trust Center

View real-time security and compliance information at trust.tuteliq.ai

​
What you’ll find

Security Practices

Infrastructure security, encryption standards, access controls, and vulnerability management policies.

Compliance Status

Current compliance posture for GDPR, KOSA, EU Digital Services Act, UK Online Safety Act, and more.

Sub-Processors

Full list of third-party sub-processors, their locations, purposes, and DPA links.

Data Handling

Retention policies, data minimization practices, and encryption-at-rest and in-transit details.

​
Key commitments

​
What we keep, what we don’t

We operate a content-out, metadata-in pipeline. The distinction matters because everything we say about your data flows from it.

​
What we never store

​
What we do store

​
Your controls

  • Full deletion within 1 hour of a DELETE /account/data request
  • Encryption at rest (AES-256) for all stored metadata
  • End-to-end encryption (opt-in) — register an RSA public key and Tuteliq can no longer decrypt your stored rationales (see below)
  • EU data residency by default; US region on request
  • No cross-customer linking — deployer fingerprints scoped per request
The short version: your users’ content lives in your platform, not ours. Tuteliq holds the analysis outputs your team needs to review — nothing else.

​
End-to-end encryption for stored rationales (opt-in)

By default the metadata fields we retain — LLM rationale, visual description, source data — are encrypted at rest with a Tuteliq-held AES-256 key, then decrypted server-side when your dashboard requests them. This is fast and requires no setup on your side. For customers who want stronger separation, we support customer-managed end-to-end encryption: you generate an RSA keypair, register the public key with Tuteliq, and we use it to wrap every new incident’s metadata. From that point on we cannot decrypt those fields — only your dashboard, holding the matching private key, can. The scheme identifier (TLQ-HYBRID-RSA-OAEP-AES-256-GCM-v1) and key fingerprint are embedded in every encrypted record so you can verify integrity client-side. This is opt-in by design because losing the private key permanently strands every record encrypted under it — Tuteliq cannot recover them. Teams that don’t want that operational burden should stay on the default server-side AES at rest. Teams with stricter compliance requirements (or who want a verifiable cryptographic guarantee that Tuteliq cannot read their rationales) should register a key. Existing incidents written before you register a key remain readable under the server-side scheme; only new incidents use the hybrid scheme.

​
Compliance documentation

The following endpoints are publicly accessible and require no authentication: See the GDPR Compliance page for detailed data subject rights endpoints and consent management.

​
Certification

Tuteliq also offers a free certification program for individuals and organizations who want to demonstrate their commitment to child safety. See the Certification page for details, or start directly at tuteliq.ai/certify.

​
Questions

For security inquiries, compliance questions, or to request our latest penetration test report, contact security@tuteliq.ai.