LoginBook walkthrough

Trust

Security and procurement information

Current controls and governance boundaries for enterprise due diligence on AnnexPass workspaces.

Book walkthrough

Legal entity

Operating entity and primary contact for product and procurement questions.

Operator
AnnexPass, operated by AnnexPass OÜ (Republic of Estonia)
Product contact
hello@annexpass.com

Control status

Current control posture for enterprise security and compliance review.

ControlStatus
Data residencyEU deployment regions (DE and IE)
Encryption in transitTLS 1.3
Encryption at restProvider-managed AES-256
Audit trailAppend-only event log in workspace
Tenant modelOrganisation-scoped workspace state
Role controlsOrganisation roles and scoped access in platform mode

Security governance scope

  • Customer remains the economic operator and data controller for regulatory submissions.
  • AnnexPass OÜ provides AnnexPass workflow infrastructure, evidence handling, and publication tooling.
  • Regulatory interpretation and legal sign-off remain customer responsibilities.

Subprocessors

Infrastructure and processing vendors used to operate AnnexPass workspaces.

VendorPurposeRegion
Supabase or NeonDatabase and auth infrastructureEU
Cloudflare R2Document object storageEU
ResendTransactional email deliveryEU
StripeBilling infrastructureEU
AnthropicDocument extraction processingPer DPA

Procurement package

Materials available during enterprise vendor review.

Security questionnaire response pack, architecture summary, and data processing documentation are available during the vendor review process.

AnnexPass (AnnexPass OÜ) provides software tools to support compliance workflows. Customers remain the economic operator responsible for regulatory compliance. Not legal advice.

Need a procurement pack?

Request a walkthrough and security questionnaire response for your vendor review.

Book walkthroughEnterprise model