Document register

Policies & documents

Every document carries a version, an owner, a last-updated date and a publication status. Nothing moves to Available without review and sign-off.

15 of 15 documents

In preparation

Security Overview

How casaios protects customer data: architecture, access control, encryption, monitoring and resilience.

Category
Security
Last updated
Not yet published
View
In preparation

Responsible AI Statement

casaios principles for transparent, human-centred and provider-independent AI.

Category
Responsible AI
Last updated
Not yet published
View
Available

Subprocessor Register

Current list of third parties processing customer data on behalf of casaios.

Category
Privacy
v
1.2
Last updated
Published 2026-07-21
View
In preparation

Data Processing Agreement (DPA)

Contractual terms governing casaios processing of personal data on behalf of customers.

Category
Legal
Last updated
Not yet published
View
In preparation

Privacy Policy

What personal data casaios collects, why, on what legal basis and for how long.

Category
Privacy
Last updated
Not yet published
View
In preparation

Cookie Policy

Cookies and similar technologies used by casaios, and how preferences are managed.

Category
Privacy
Last updated
Not yet published
View
In preparation

AI Processing Notice

How prompts, outputs and context data are handled when AI features are used.

Category
Responsible AI
Last updated
Not yet published
View
In preparation

Technical and Organizational Measures (TOMs)

Article 32 style control description covering confidentiality, integrity, availability and resilience.

Category
Security
Last updated
Not yet published
View
In preparation

Data Retention & Deletion Policy

Retention periods per data category, deletion triggers and verified erasure.

Category
Privacy
Last updated
Not yet published
View
In preparation

Information Security Policy

The governing policy for information security roles, responsibilities and control objectives.

Category
Security
Last updated
Not yet published
View
In preparation

Incident Response Policy

Detection, triage, containment, customer notification and post-incident review.

Category
Security
Last updated
Not yet published
View
Planned

Business Continuity & Disaster Recovery Policy

Recovery objectives, failover approach and continuity testing schedule.

Category
Security
Last updated
Not yet published
View
In preparation

Vulnerability Disclosure Policy

How to report a suspected vulnerability to casaios and what to expect in response.

Category
Security
Last updated
Not yet published
View
Planned

Acceptable Use Policy

Permitted and prohibited uses of the casaios platform, including AI-specific restrictions.

Category
Legal
Last updated
Not yet published
View
Planned

Service Level & Availability Statement

Availability targets, measurement method, support response times and maintenance windows.

Category
Compliance
Last updated
Not yet published
View