Where your data is processed and stored when we assess your AI, including our platform provider, oxethica.
This page explains where and how personal data is processed when we assess your AI systems, including the role of our platform provider, oxethica. Last updated 22 June 2026.
For enquiry and client-relationship data, Albany Limited (trading as Zymbos Advisory) is the data controller. When we assess a client’s AI system, any personal data within that system is processed on the client’s behalf under a data processing agreement; in that context oxethica acts as our sub-processor.
Assessments are delivered on the oxethica platform, where all data is processed and stored within the European Union:
Account details; AI systems and associated assessment data; risk assessments; audit trail; incident reports; uploaded documents; and session data.
Platform data is retained for the life of the account. On account deletion, personal data is anonymised and is no longer attributable to an individual. You should export or back up any documents before an account is closed.
Data is encrypted in transit (TLS), protected by access controls and multi-factor authentication, and backed up by the platform provider. Standard contractual clauses or equivalent safeguards are used for any international transfer.
You have the data-subject rights set out in our Privacy Policy. For any question about data processing, contact hello@zymbosadvisory.com.
Draft for review. This document is a starting template based on our platform provider’s policies and must be reviewed by a qualified solicitor before publication. It is not legal advice.