Trust & Compliance

People data deserves European rules

GDPR, EU hosting and the AI Act are design constraints we started from — not certifications we retrofitted.

Hosting

EU data residency

Your data is hosted in the European Union and stays there. TalentRewards is built and operated by Almaware S.r.l. in Bergamo, Italy — a European company under European law.

GDPR

Compliance built into the product

Consent management, data export, right-to-erasure workflows and retention policies are product features, not support tickets. A Data Processing Agreement is available for every customer.

AI

AI That Respects Your People and Your Data

Our AI assists you in writing — it never scores, rates, or decides about workers. The judgement and the decision stay with people.

We process prompts with Zero Data Retention: your content is never stored or used to train third-party models. Text is processed in the EU.

Security

Isolation you can explain to your DPO

Every organization is isolated with database row-level security — access rules enforced by the database itself, not just the application. Roles limit what employees, managers and admins can see, and mutations are recorded in an audit trail.

On-premise for regulated sectors

Public administration, banking, healthcare, life sciences: when the data cannot leave your infrastructure, TalentRewards can run inside it. The self-hosted deployment is the same product, not a reduced edition.

Talk to us about self-hosting

Documentation for your obligations

We provide the documentation and a client kit — including a worker-information template — to support your obligations as an employer.

Transparency runs deep here: we even publish a machine-readable product summary for AI assistants. llms.txt

Questions your DPO will ask? We answer them.

Read the FAQ