• CASA Tier 2

  Overview Emma has achieved CASA Tier 2, demonstrating that our application meets Google’s security requirements for accessing and handling sensitive user data. CASA (Cloud Application Security Assessment) is part of the security framework defined by Google for applications integrating with Google services. What this means CASA Tier 2 provides assurance that: Sensitive Google user data is handled securely Access to data is properly controlleFew readers

• Submit emma.legal to Microsoft Defender for Review

  If you are an Microsoft o365 customer and you use Defender to secure your computers, it could occur that the following URLs are blocked: www.emma.legal app.emma.legal To unblock these domains you can submit the domain to Microsoft for review. Here are the steps as an o365 admin to take: Log into security.microsoft.com Go to Actions & submissins and then select Submissions as shown in the image belFew readers

• Subprocessors

  At Emma, we are committed to transparency and security in all aspects of our operations. Below, you will find an up-to-date list of the trusted subprocessors we use to deliver and support our services, as well as a description of how each is involved in our processes. All subprocessors listed operate exclusively within the European Union, ensuring compliance with GDPR and EU data residency requirements. Last updated: 2025-07-03 Amazon Web Services (AWS) Location: EU (Frankfurt,Few readers

• ISO 27001

  Our SaaS platform is designed and operated in alignment with the rigorous security and privacy standards, ensuring strong protection and compliance. ISO 27001 [](https://downloads.intercomcdn.com/i/o/hyz9xzo6/2056881000/cc1196d881c768785e0dd26ecc8a/00407_IAS_right%404x.png?expires=1784813400&signature=86357b496ec44eba99eebb7744d3aa96f7b75c056f0e23c4c63c7920ae4ed1d2&req=Few readers

• Data Privacy & GDPR

  Here you can find our Privacy Policy and our Data Processing Agreement. 1. What is GDPR? The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas. GDPR aims to give control to individuals over their personal data and to simpliFew readers

• Information Security

  Summary Here is the summary version for Information Security. For a more elaborate version, please check our FAQs below. Is my data safe with you? Yes, your data is safe with us. We adhere to the following principles: Does my data remain mine? Your data remains yours. We do not use your data to train our own LLMs or the LLMs of third-party providers. How transparent are you about data location? Transparency on data location is a priority. The LLM space is rapidly evolvingFew readers

• SOC 2 Type II

  Overview Emma has successfully completed a SOC 2 Type II audit, demonstrating that our controls are appropriately designed and operate effectively over time to protect customer data. SOC 2 is an independent auditing standard developed by the American Institute of Certified Public Accountants that evaluates how companies manage data based on strict security criteria. [![](https://storage.crisp.chat/users/helpdesk/website/-/6/1/8/0/618037da348ffc00/d17d7ba4-Few readers