Trust & Compliance

People data deserves European rules

GDPR, EU hosting and the AI Act are design constraints we started from, not certifications we retrofitted.

Hosting

EU data residency

Your data is hosted in the European Union and stays there. TalentRewards is built and operated by Almaware S.r.l. in Bergamo, Italy, a European company under European law.

GDPR

Compliance built into the product

Consent management, data export, right-to-erasure workflows and retention policies are product features, not support tickets. A Data Processing Agreement is available for every customer.

AI

AI That Respects Your People and Your Data

Our AI assists you in writing: it never scores, rates, or decides about workers. The judgement and the decision stay with people.

We process prompts with Zero Data Retention: your content is never stored or used to train third-party models. Text is processed in the EU.

Security

Isolation you can explain to your DPO

Every organization is isolated with database row-level security: access rules enforced by the database itself, not just the application. Roles limit what employees, managers and admins can see, and mutations are recorded in an audit trail.

On-premise for regulated sectors

Public administration, banking, healthcare, life sciences: when the data cannot leave your infrastructure, TalentRewards can run inside it. The self-hosted deployment is the same product, not a reduced edition.

Talk to us about self-hosting

Documentation for your obligations

We provide the documentation and a client kit, including a worker-information template, to support your obligations as an employer.

Transparency runs deep here: we even publish a machine-readable product summary for AI assistants. llms.txt

Questions your DPO will ask? We answer them.

Read the FAQ