HTTPS connections
The production application is served over HTTPS, protecting data in transit between your browser and the service.
TRANSPORT SECURITY01 / SECURITY OVERVIEW
Care for your work.
At every layer.
Clarity by default.
Customer Journey Guide helps teams understand customer needs and design better experiences. We bring the same care to the platform your team relies on.
Accounts & workspace roles
The product requires sign-in. Access within a workspace follows assigned roles, so permissions reflect how your team works.
ACCESS CONTROLEU production infrastructure
Our application and primary database run in Microsoft Azure, West Europe. AI processing uses an EU Data Zone deployment.
Read the residency detailsDatabase backups
Production PostgreSQL backups have a seven-day retention period. File storage has a secondary copy in North Europe, Ireland.
DATA RESILIENCE02 / DATA RESIDENCY
Based in Europe.
Open about the details.
Production services and AI processing are hosted in the EU. WorkOS, used for MCP connection authentication, is the remaining non-EU exception.
Microsoft Azure
Our production infrastructure
- Application & primary database
- West Europe Netherlands
- Primary file storage
- West Europe Netherlands
- File storage secondary copy
- North Europe Ireland
- AI suggestions & translations
- Azure OpenAI EU Data Zone · Standard
- Identity & transactional email
- Europe Azure services
Email delivery to a recipient’s mailbox is outside the scope of this hosting statement.
A note on MCP authentication
WorkOS handles authentication for MCP connections and involves processing in the United States. We are seeking a replacement to remove this remaining non-EU dependency. The replacement is not yet complete.
See our service providersInfrastructure information as of .
03 / PRIVACY & COMPLIANCE
Clear commitments.
Honest answers.
Personal data & the GDPR
Clientology Institute s.r.o. processes personal data under the General Data Protection Regulation (GDPR). Our published privacy policy describes our role as controller for users’ personal data.
For questions about processing customer content, contractual responsibilities, or a data processing agreement, please contact our team.
Read our privacy policyCertification status
We do not currently hold ISO 27001, SOC 2, or a GDPR certification. The practices described here are an overview of our service, not an independent audit or certification.
04 / RESOURCES
The details, in writing.
Read our published policies or take a copy of this security overview. No account required.
Working through a security review?
Get in touch about your questionnaire or data processing requirements.
05 / SUBPROCESSORS
Know who supports
the service.
These providers support the core production service and MCP authentication. The locations below describe their role in Customer Journey Guide.
| Provider | Purpose | Processing location |
|---|---|---|
| Microsoft AzureCloud infrastructure | Application hosting, PostgreSQL, file storage, real-time services, monitoring, identity, and transactional email. | European UnionWest Europe; file storage secondary in North Europe. Identity and email data location: Europe. |
| Microsoft Azure OpenAIAI processing | In-product AI, including needs suggestions and translations. | European UnionEU Data Zone · Standard deployment. |
| WorkOSMCP authentication | Authentication for MCP connections. Replacement is being sought. | United StatesRemaining non-EU processing exception. |
This is a summary of core providers. For the full contractual subprocessor inventory and transfer arrangements, request details from our team.
06 / COMMON QUESTIONS
A little more clarity.
Is all processing limited to the EU?
Production services and AI processing use EU hosting, including Azure OpenAI EU Data Zone for needs suggestions and translations. WorkOS, used for MCP connection authentication, involves United States processing. We are seeking a replacement, so we do not claim that all processing stays in the EU. Email delivery also depends on the recipient’s mailbox provider.
Who can access a workspace?
The product requires sign-in, and access inside a workspace follows assigned roles. Your workspace permissions determine what you can access and do.
Is Customer Journey Guide ISO 27001 or SOC 2 certified?
No. We do not currently hold ISO 27001, SOC 2, or a GDPR certification. Our trust center describes current practices and does not represent an independent audit.
Can you help with a security questionnaire or DPA?
Please email info@clientology.cz with your requirements. Our team can discuss security questions, processing responsibilities, and contractual documentation.
How do I report a security concern?
Contact info@clientology.cz with a description and enough context for us to investigate. Please avoid including passwords, access tokens, or customer content in your initial message.