Trust and GDPR
Your records stay yours, in the EU
Calibration and maintenance records are evidence for your audits. Here is how the apps look after them. Ask us anything that is not here.
Hosted in the EU
The apps and their database run on servers in Paris, France (Oracle Cloud Infrastructure).
Your own installation, in your region
On an enterprise agreement, your organization can have its own separate installation, in the region you choose, kept apart from every other customer.
Organizations kept apart
Every organization's records are separated in the database itself, row by row, so one company can never see another's, whatever the screen asks for.
Sign-in
Your company's Microsoft or Google account, or a password stored only as a strong one-way hash (Argon2id). Each person has a role in each app, and can be limited to their own sites.
Every change recorded
Who changed what, and when: the audit log keeps it, for your auditors and for you.
Backups and your data out
The database is backed up every night. Export your equipment register as a spreadsheet at any time.
GDPR
You decide what goes into the apps; Makkal processes it for you. A data processing agreement is available: write to [email protected].
Every service the apps use
| Service | What for | Where |
|---|---|---|
| Oracle Cloud Infrastructure | The servers and the database; sending email | Paris, France |
| Cloudflare | These websites, and a robot check on the contact form | Cloudflare’s network |
| Google Gemini API (paid) | Reads the calibration certificates you drop into GageMakkal, when AI reading is switched on for your organization. Google does not use the files or what it reads to train or improve its models; it keeps requests for up to 55 days, only to detect abuse. | Google’s servers; may be outside the EU |
| Microsoft and Google sign-in | Only if your organization chooses to sign in with them | Their own services |
Certifications such as SOC 2 and ISO 27001: ask us what your company needs.