Trust & policies
Everything we sign for
when you sign up.
We keep our terms, security practices, and data commitments in one place. All documents are effective 15 April 2026 unless noted otherwise.
- →
Privacy Policy
How we collect, use, and safeguard your personal data. GDPR-aligned.
- →
Terms of Service
The commercial agreement between you and Smalt AI Sdn Bhd when using the platform.
- →
Cookie Policy
Which cookies we use, what they do, and how to change your choices.
- →
Security & Trust Center
Our infrastructure, encryption, access control, compliance posture, and incident response.
- →
Compliance Roadmap
Where we stand today on SOC 2 Type I, what we are hardening in 2026, and what is on the longer-term roadmap.
- →
Data Processing Agreement
Our DPA for customers processing personal data through the Service — controller/processor obligations.
- →
Acceptable Use Policy
What the platform can and cannot be used for. Incorporated into the Terms of Service.
- →
Service Level Agreement
Uptime commitments, support response times, and service credit terms.
- →
Responsible AI
Our principles on human-in-the-loop, transparency, fairness, and safety — plus the AI governance frameworks we align with.
- →
System Card
How we deploy, configure, and guardrail the foundation models behind the platform — intended use, safeguards, evaluation, and limitations.
- →
Sub-processors
Third-party processors we use (AWS, Anthropic, Google, Stripe, Amazon SES, Resend).
Questions about any of these? [email protected]