How we handle your data

Claima processes UK company data, grant application content, and evidence documents. This page explains where that data lives, who can access it, and what commitments we make today.

Hosting & data residency

Infrastructure: Supabase (database + authentication) is hosted on AWS eu-west-2 (London region). The Railway API backend is hosted in the EU region. The frontend is delivered by Vercel's global CDN; no customer data is stored on Vercel. Third-party processors for email, analytics, and monitoring are listed in our Privacy Policy; their regions may differ.

GDPR

Claima is GDPR-aligned. We process personal data (names, emails, company information) on the lawful basis of contract performance and legitimate interest. Customers may request access, correction, or deletion of their data at any time via hello@claima.ai.

See also: Privacy policy · Terms

Data Processing Agreement

A Data Processing Agreement is available on request for customers who need one for their own compliance obligations. Email hello@claima.ai.

ICO registration

Claima.ai Ltd's ICO registration is in progress. Registration details will be published here once complete.

Encryption

All data is encrypted in transit using TLS 1.2 or higher. At-rest encryption is provided by our infrastructure partners (Supabase, Railway, Vercel).

Decision logs

Every agent decision — source reads, fit-signal generation, evidence-state changes, and source freshness updates — is logged with the inputs used and the reasoning applied. Customers can inspect the full decision trail for any application in their workspace.

Contact

Security or data protection questions: hello@claima.ai