Security & Compliance

Paste the options, pricing, and specs you're weighing and get a reasoned recommendation with the trade-offs spelled out.

What we handle

CompReason compares options, pricing, and specs you provide to produce a reasoned recommendation. Inputs frequently contain confidential business data (vendor terms, budgets, roadmap). We do not train public models on your submissions without explicit consent (GDPR Art.6).

Data handling commitments

• Minimization & isolation — data is used only to generate your comparison; we minimize retained data and keep your inputs separate (GDPR Art.5).
• Encryption in transit & at rest via standard TLS / encrypted storage (GDPR Art.32).
• Least-privilege, role-based access; no resale of business data.
• Erasure on request where technically feasible (GDPR Art.17).

Compliance posture

B2B data-processor posture: you remain the data controller for any personal data in your inputs. CompReason is decision-support and is not a substitute for procurement or legal sign-off.

Subprocessors

We rely on our hosting provider (Vercel) and payment processor (Waffo). No data is sold.