Compliance that rests on evidence, not trust.
Deltawall is aligned with GDPR, NIS2, DORA and SOC 2. Here is what aligned means, and how your auditor can check the evidence without trusting us.
Rules and frameworks
GDPR aligned. What people type and upload stays on their device. We never see it.
NIS2 aligned. Evidence of control that you can verify without us.
DORA aligned. Payment and account data controlled on every AI channel.
SOC 2 aligned. Controls designed around security, availability and confidentiality.
These four lines describe protection in the browser.
EU AI Act. Every warning explains why, so people learn safe AI use as they work.
Works councils. Reports by department, never by person. Unmasking needs a second approver.
What aligned means
Aligned means designed around the principles of each law or framework. Deltawall holds no certification and no SOC 2 report today. ISO 27001 certification and a SOC 2 audit are on our roadmap.
Independent audit and compliance assessment can be facilitated on demand.
Ask the teamThe leaks are in the news, including in the Netherlands.
Dutch DPA, August 2024
A GP practice employee entered patients' medical data into an AI chatbot. At a telecom company, an employee entered a file with customer addresses.
Both were reported to the Autoriteit Persoonsgegevens as data breaches.
Municipality of Eindhoven, December 2025
A one-month sample found files with personal data of residents and staff uploaded to public AI sites.
The municipality reported it to the Dutch DPA, blocked ChatGPT and asked OpenAI to delete the files.
Samsung, 2023
Employees pasted source code and meeting notes into ChatGPT. At least three incidents in three weeks.
Samsung then banned generative AI tools on its company devices.
77%
of employees who use AI tools paste data into them
22%
of the employees who paste share personal or payment data
82%
of pastes into AI tools go through personal accounts, out of IT's sight
Sources
- Autoriteit Persoonsgegevens, 6 August 2024
- Municipality of Eindhoven and Binnenlands Bestuur, 19 December 2025
- Gizmodo, April 2023
- TechCrunch, May 2023
Evidence your auditor can verify without us.
Every decision is on record in an evidence chain. Evidence packs are signed and verifiable offline.
0 bytes
of prompt or file content sent to us
90 days
maximum retention
EU
hosting
No training
on your data
These facts describe protection in the browser.
Bring your auditor to the demo.
Thirty minutes, live, no slides. A prompt masked, a file stopped, the evidence verified in front of you.