Your data, in good hands
Privacy, hosting in Europe and responsible use of AI: what SmartBlock guarantees to its clients.
Your data never leaves your account
The data you import or annotate in the SmartBlock app is visible exclusively to your company's users. It is never shared, sold, or made accessible to another client.
Hosted in Europe
The entire infrastructure (database, application) runs on Google Cloud servers located in Europe. Data is encrypted at rest and in transit (HTTPS/TLS). No data passes through servers outside the EU.
GDPR compliant
Our terms and conditions strictly govern data processing (Article 6). If your organization needs a Data Processing Agreement (DPA) compliant with Article 28 of the GDPR, we provide it on request.
AI structures our data, never yours
We use AI tools internally to structure the real estate listings we collect (extraction, deduplication). Your own data, the data you import into your account, is never used to train a model, ours or a third party's.
Frequently asked questions
- Who has access to my data at SmartBlock?
- Only people involved in support or technical maintenance have access, on a need-to-know basis. Your data is never consulted for commercial purposes or to feed third-party analyses.
- Do you subcontract part of the processing to other providers?
- Our infrastructure runs entirely on Google Cloud Platform. The only additional subcontractor is Stripe, for billing only: it never receives your market data or annotations, only payment information.
- Are you ISO 27001 / SOC 2 certified?
- SmartBlock does not have its own security certification at this stage. The underlying infrastructure, Google Cloud Platform, is ISO 27001 and SOC 2 certified, and we inherit its guarantees (encryption, access control, availability).
- What happens in the event of a security incident?
- In accordance with the GDPR, any incident affecting your data would be notified to you without undue delay, with a description of its nature and the measures taken.
- What happens to my data if I terminate my contract?
- On simple request or upon termination, we permanently delete your data from our servers, subject to the technical backups necessary for service continuity.
- Can you sign a DPA (Data Processing Agreement)?
- Yes, on request, compliant with Article 28 of the GDPR.
Full contractual details are set out in our Terms & Conditions, Article 6.