Dazr trust centre
Last updated 6 October 2026
If a translation of this page differs from the English version, the English version applies.
Trust centres of our products
- Dazr Compliance: compliance programmes, audits and the evidence trail for the Cyber Resilience Act
- Dazr Suite: Docs, Sheets and Slides
- Dazr Files: your files and organisation spaces
- Dazr Browser: the desktop browser and its update service
- Dazr Identity: accounts, organisations and verification
- Dazr Sign: electronic signatures with a sealed evidence trail
The sections below cover dazr.eu and the free tools on it.
Where your data is stored
We store personal data in the European Union. Vercel, Upstash and Resend are companies based in the United States. Where one of our providers can access personal data from outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses or by an adequacy decision of the European Commission.
For companies in the United States, that adequacy decision is the EU-US Data Privacy Framework, which covers the companies certified under it.
Sub-processors
These companies process personal data for us, only on our instructions and under written contracts that oblige them to protect it:
| Provider | Location | Purpose | Data |
|---|---|---|---|
| Vercel | United States; data stored in the EU | Hosting of the websites and server functions, and page statistics | Server logs, kept for up to 30 days |
| Upstash | United States; data stored in the EU | Database (key-value store) for accounts and records | Records of the websites, such as short-lived rate-limit counters |
| Resend | United States | Sending contact form messages, the copy to you and the newsletter | Name, email address and message |
How we protect your data
- Encryption in transit. All traffic is encrypted with HTTPS. Browsers are told to use only HTTPS for dazr.eu and all its subdomains (HSTS, with the preload directive).
- Content Security Policy. Browsers run only the scripts we list: our own files, inline scripts identified by their hash and one pinned library file. Plugins are blocked, and other websites cannot show our pages in a frame.
- No advertising or tracking. Our websites show no advertising and contain no third-party trackers, pixels or social media widgets. Fonts and scripts come from our own servers.
- Spam protection. Before a public form is sent, your browser solves a small calculation (proof of work). It runs on your device and sets no cookie.
Privacy
The legal overview lists the privacy notice and terms of use of every product, and the website privacy notice covers dazr.eu and its free tools.
You can ask us for access to your personal data, a copy in a portable format, correction, deletion or restriction, and you can object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time.
Write to privacy@dazr.eu for anything you cannot do yourself. We reply within 30 days.
You can also complain to a data protection authority: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority where you live or work.
Compliance and assessments
- GDPR. Dazr, Viale Cesare Poggi 1, 15061 Arquata Scrivia (AL), Italy, VAT IT 02801250065, is the controller for the personal data described in the privacy notice, under the General Data Protection Regulation (GDPR).
- CSA STAR Level 1: self-assessment in preparation. Dazr is completing the Cloud Security Alliance’s Consensus Assessments Initiative Questionnaire (CAIQ) for the CSA STAR Registry. This page will link to the published entry.
Reporting a vulnerability
If you find a security vulnerability in one of our services, please report it to security@dazr.eu. Describe what you found and the steps to reproduce it, and name the address or app version concerned.
- Scope. The Dazr websites and services on dazr.eu and its subdomains, their APIs, Dazr Browser and the Dazr Suite apps.
- Testing with care. Use your own accounts and test data, access other people’s data only as far as needed to show the problem, and keep the service running for everyone: no denial-of-service tests, spam or social engineering.
- Safe harbour. If you act in good faith and follow this policy, we consider your research authorised and will not take legal action against you. Please give us reasonable time to fix the problem before you share details publicly.
- Our response. We acknowledge your report within 5 working days and keep you informed until the problem is fixed.
Our security contact is also published in security.txt (RFC 9116).
The full policy, including what is out of scope and how we publish fixes, is our vulnerability disclosure policy.
Contact
- Privacy and data requests: privacy@dazr.eu
- Security: security@dazr.eu
- General: hello@dazr.eu
- Post: Dazr, Viale Cesare Poggi 1, 15061 Arquata Scrivia (AL), Italy