Our security posture in one paragraph
Olyteck Apps is one account for a suite of everyday business tools. It runs on our own server in France (Scaleway, PAR1); every organisation's data is isolated in the database with row-level security. Sign-in is through Microsoft Entra ID or a single-use e-mail link and code: we store no passwords. PDF Forge and DataMask process your documents entirely in your browser — the files never reach our server — and SecretLink is zero-knowledge (the secret is encrypted in your browser). Meeting Notes keeps recordings and transcripts on your device; for a transcription our server relays only the compressed audio to the engine and keeps nothing: Groq (United States) for recordings up to 30 minutes, Mistral AI (EU) for longer ones, as listed below. Organisation administrators decide who holds a seat and who may open each app; seat and access changes are logged in an audit trail.
Product site: https://apps.olyteck.com
Documents
Showing documents for Olyteck Apps. Items marked NDA or ON REQUEST are released to qualified prospects and customers via e-mail.
Public
Available under NDA
Certifications & assurance
Where we are today and what we are working toward.
Sub-processors
Carefully selected, contractually bound — those that apply to Olyteck Apps. Last reviewed 2026-10-05.
| Sub-processor | Service | Region |
|---|---|---|
| Microsoft Corporation | Entra ID authentication + Microsoft Graph (customer-controlled tenant) | Customer-controlled |
| Scaleway (EU cloud hosting) | Infrastructure-as-a-service hosting of application, database, backups | European Union (France, PAR1) |
| Microsoft 365 (Exchange Online) | Transactional & notification e-mail delivery | European Union |
| Stripe Payments Europe, Ltd. | Card payment processing & subscription billing | European Union / Ireland |
| Amazon Web Services EMEA SARL (Amazon SES) | E-mail delivery for Apps and Edu: sign-in links and codes, invitations, training assignments and reminders, and newsletters for people who opted in | European Union (Stockholm, eu-north-1) |
| Mistral AI | AI features in Apps (diagram generation, meeting minutes) and Meeting Notes transcription of recordings over 30 minutes (Voxtral). The provider may keep API inputs up to 30 days for abuse monitoring | European Union (France) |
| Groq, Inc. | Meeting Notes: transcription of recordings up to 30 minutes — compressed audio only, when the user starts a transcription | United States |
This page is the authoritative, current list of our sub-processors. We post any addition or replacement here at least 30 days before it takes effect, so customers can review and object as set out in our DPA. To be added to our change-notification list, e-mail us.
Status & incident response
Live system status is published at status.olyteck.com. Customers are notified of personal-data incidents without undue delay and within 72 hours, in line with GDPR Article 33.
Report a security issue
Customers and third parties can report a suspected security issue to [email protected]. We acknowledge receipt within one business day and engage a responder.
Talk to us
Need a vendor security questionnaire filled in?
We pre-write most answers. Send us your template and we usually return it inside two business days.
[email protected]Sign an NDA & get the full pack
Detailed S-SDLC, pentest summary, BCP exercise report, full architecture diagrams.
Request the pack