Stackeo
Lire en français, FRWrite to us
Stackeo
Lire en français, FRWrite to us

Security and data

Our rules for your clients’ data

Stackeo is under construction. Here are the rules the founders wrote before any feature, the hosting choice being validated, and what we do not claim yet.

The rules. Written first, binding on everyone who builds Stackeo.

  1. Each firm is isolated

    No organisation may reach another’s data: database isolation plus server checks. In the version being built, every boundary has a test that tries to cross it.

    Rule and tests

  2. Vision acts with the asker’s rights

    Every agent and tool acts with the effective permissions of the person and the firm; the model’s instructions are never the boundary. Sensitive actions wait for a person’s yes.

    Rule

  3. No access by our team by default

    Running the platform never silently means access to a firm’s content. Support access is explicit, scoped and recorded.

    Rule

  4. Sensitive actions are recorded

    An audit log keeps the sensitive actions.

    Rule

  5. AI under business terms

    Models that serve firms go through providers’ APIs or business agreements that allow it, never pooled personal subscriptions. The providers are being chosen.

    Rule

  6. Hosting: Paris, being validated

    Current choice: Supabase on Amazon Web Services, region Paris (eu-west-3), both US companies. Final once the data processing agreements are signed.

    Choice in validation

Where the AI runs, by offer

  • Pro

    Vision’s AI
    United StatesModels from Anthropic or OpenAI, selected by Stackeo.
    Your firm’s data
    Paris, France, choice being validated

  • Max

    Vision’s AI
    FranceEuropean UnionYou choose the country and the provider, including models hosted in France or in the EU.
    Your firm’s data
    Paris, France, choice being validated

  • Ultra

    Vision’s AI
    FranceEuropean UnionLike Max: you choose the country and the provider of the models.
    Your firm’s data
    Paris, France, choice being validated

Offers being finalised; they may change before Stackeo opens. Nothing can be bought today.

See the offers

What we do not claim yet

  • Any certification (ISO 27001, SOC 2, HDS, SecNumCloud): none is held.
  • « End to end encrypted », « zero knowledge », « anonymised »: we do not write them.
  • « Compliant with professional secrecy »: that is for each firm and its counsel to judge.
  • A list of providers, contracts and countries: published once signed.

Security questions.

Contact
Where will our data be hosted?

Our current choice is Paris, with Supabase on AWS (region eu-west-3), being validated. This page will name every provider and its country once contracts are signed.

Where will Vision’s AI run?

It depends on the offer. On Pro, Stackeo selects models from Anthropic or OpenAI, run in the United States. On Max and Ultra, your firm chooses the country and the provider, including models hosted in France or in the EU. Offers are being finalised.

Which AI will Vision use?

Models reached through providers’ APIs or business agreements, never personal subscriptions. The providers are being chosen.

Can your team read our files?

Not by default. Our rule: support access is explicit, limited to what the firm allows, and recorded in the audit log.

Who hosts this website?

Cloudflare, over HTTPS only. See the legal notice and the privacy page.

A question from your IT team?

Write to us: we answer with what is decided, and say what is not.

Write to us