Last updated: 12 June 2026
Publisher. ActCovered is published by EZIOM, a French simplified joint-stock company (société par actions simplifiée — SAS), registered in France under SIREN 922 234 216, with its registered office at 200 rue de la Croix Nivert, 75015 Paris, France.
Publication director. Hugo Morales — contact: hello@actcovered.com.
Hosting. This website is hosted by Hostinger International Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus (servers located in France) — www.hostinger.fr. Application data is hosted by Supabase Inc. on AWS infrastructure in the European Union (region eu-west-1, Ireland).
Intellectual property. All content on this site (texts, design, wordmark, software) is the property of the publisher unless stated otherwise. Any reproduction without prior written consent is prohibited.
We build a compliance product; we hold ourselves to the standards we sell. This policy describes how we process personal data under Regulation (EU) 2016/679 ("GDPR").
EZIOM, SAS (details above). Contact for all privacy matters: hello@actcovered.com.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address (account) | Authentication (magic link), account management | Contract performance | Until account deletion |
| Compliance file content (AI register, policy, training log — may include employee names you enter) | Providing the service | Contract performance | Until account deletion |
| Email, quiz score (Readiness Check) | Sending your report; product communications you can opt out of at any time | Consent | 3 years after last contact |
| Billing data (handled by Stripe) | Payments, invoicing | Contract & legal obligation | 10 years (accounting law) |
A note on your team's data. When you add employees to your training log, you act as data controller for that data; we process it solely on your instructions, as processor, to provide the service.
We use a deliberately short list of processors, all serving from the European Union: Supabase (database & authentication — AWS eu-west-1, Ireland), Stripe (payments), Brevo (emails — France), Hostinger (web hosting — France). No data is sold or shared for advertising. No transfers outside the EU/EEA are made except where a processor relies on approved safeguards (Standard Contractual Clauses).
We do not use advertising or cross-site tracking cookies. The application stores your working data locally in your browser (localStorage) and uses strictly necessary session storage for authentication. If we add audience measurement, it will be cookie-free.
You have the right to access, rectify, erase, port your data, and to restrict or object to processing. Exercise these rights at hello@actcovered.com — we answer within 30 days. You may lodge a complaint with the CNIL (cnil.fr).
ActCovered provides software tooling to help organisations document their use of AI systems in connection with Regulation (EU) 2024/1689 (the "EU AI Act"): an AI register, policy generator, training log and evidence exports. ActCovered provides compliance tooling and document templates, not legal advice. Using the service does not guarantee compliance with any law; for binding interpretation, consult a qualified lawyer.
The service is intended for business use. You are responsible for the accuracy of the information you record and for maintaining the confidentiality of access to your mailbox (authentication is by email link). Demo mode stores data only in your browser; we are not responsible for loss of demo data.
Paid plans (Starter, Growth) are billed monthly in advance via Stripe, at the prices displayed at checkout (excl. VAT where applicable; VAT is computed at checkout). You can cancel at any time via "Manage billing" in the app — cancellation takes effect at the end of the current billing period, without refund of the period already started. The Done-for-you Audit is a one-off service, scheduled with you after purchase. Prices may change with 30 days' notice; founding-member discounts are kept for the lifetime of the subscription.
The service is reserved for professionals; the consumer right of withdrawal does not apply, except for professionals with five or fewer employees acting outside their main field of activity, as provided by the French Consumer Code.
We aim for high availability but do not guarantee uninterrupted service. To the maximum extent permitted by law, our total liability is capped at the amounts you paid us in the twelve months preceding the claim, and we are not liable for indirect damages — including regulatory fines, which depend on your own compliance decisions.
You may delete your account at any time (hello@actcovered.com). We may suspend accounts for abuse, non-payment, or unlawful use, with notice where practicable. Upon deletion, your data is erased within 30 days, except what we must keep by law.
These terms are governed by French law. Any dispute that cannot be resolved amicably falls under the jurisdiction of the courts of the publisher's registered office.