Legal & Compliance

Key links for legal, privacy, and security topics, plus an honest summary of Odeus's current compliance posture.

Useful links

Description	Link
Privacy Policy	Privacy Policy
Terms of Use	Terms of Use
Status page	Status Page

Data Processing Agreement (DPA)

A Data Processing Agreement (DPA) is available on request and forms part of our Terms of Service for customers who require one. Contact [email protected] to put a DPA in place.

How your data is handled

• Your data is never used to train models. Prompts, files, and knowledge content stay within your workspace and are not used to train Odeus or any underlying model provider.
• Hosting. Odeus runs as a managed SaaS on Microsoft Azure (AKS).
• Access control. Workspaces enforce role-based access (owner, admin, billing, member), teams, invites, and seat limits, so you control who can see what.

Compliance posture

Odeus does not currently hold formal SOC 2 Type II or ISO 27001 certifications. We are actively working toward a formal compliance program. For the most up-to-date status, or to discuss specific requirements (e.g. a DPA, security questionnaire, or regional hosting), contact us directly.

The following enterprise governance capabilities are on our roadmap and are not yet available:

• SAML SSO and SCIM provisioning
• Audit logs
• IP / domain restrictions
• Configurable data-retention policies

Authentication today is via email magic-link / one-time code and Google OAuth (single sign-on).

If you have further questions or need documentation not listed here, reach out to our team at [email protected].