A defined data scope.
Start with the files and tools needed for one process. Your company chooses which sources enter the project and when the scope should expand.
Privacy and security
Bring AI into your processes. Keep control of your data.
Cromo is configured around agreed sources and processes, making workflow steps, outcomes and human intervention visible.
SOC 2 Type II On premises when required
Work you can inspect.
Cromo connects answers to their sources and keeps workflow steps, outcomes and exceptions available for review.
People stay in control.
A workflow can include checks, corrections and approval points. Human oversight is defined around the risk of the process you configure.
SOC 2 Type II report.
Cromo has a SOC 2 Type II report. Relevant documentation can be shared as part of a security review.
Privacy architecture
Every process has its own perimeter.
Before configuration, we define the data, people, services and controls involved in each process with your team.
Deployment options
Managed deployment
Cromo is configured within the agreed infrastructure, with sources, access and operating responsibilities defined before go-live.
On premises
When project requirements call for it, Cromo can be deployed within company infrastructure to keep the deployment inside the agreed perimeter.
Defined for each process
Sources
The files, systems and information available to the process.
Roles and access
Who can view, change, approve or run each activity.
Models and providers
The AI services involved in execution.
Retention and deletion
Where data and results are kept and when they are removed.
Human oversight
The reviews and approvals required before relevant actions.
Traceability
The results, interventions and exceptions available for review.
Privacy is not added
at the end of the process.
It starts with the sources you connect, continues through the actions Cromo performs and includes the points where people review the work.
Common questions
How data control works in practice.
Your company chooses the files and systems connected to a project. We define the required sources and access with you before configuring the process.
Yes. Review or approval points can be added where needed. Users can inspect outputs, resolve exceptions and correct specific results.
Data location depends on the agreed deployment. When project requirements call for it, Cromo can be deployed on premises so data and systems remain within the infrastructure defined by the company. Before implementation, we agree storage, access, updates and operating responsibilities with the team.
It is an independent auditor's report on the design and operating effectiveness of controls over a defined period. We can share the relevant documentation during your security review.