Snapshot 24501
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Omnea Omnea’s security & compliance principles guide how we deliver our products and services, enabling people to simply and securely access our platform which empowers modern businesses to streamline procurement processes in one AI-native workspace. [email protected] Privacy PolicyOpens in new tab Filter by Compliance SOC 2 UK Cyber Essentials GDPR SOC 1 Resources View all Compliance Cyber Essentials Certificate of Assurance Dec 2025 SOC 2 Bridge Letter - 2026 SOC 2 Type II Report June 2026 SOC 1 Type II Report June 01, 2025 - June 30, 2026 Penetration Tests Penetration Testing Report Nov 2025 Policies Security as a Company Value Access Control Policy (EN) Asset Management Policy (EN) Code of Conduct (EN) View 13 more Miscellaneous Architecture Diagram Third Party Service Providers Third Party Service Providers Other resources Background Check Policy AI Policy AIMS Governance Policy Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 18 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 8 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 30 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Infrastructure hosting; AI model inference and processing via Amazon Bedrock US, UK AWS us-east-1 (North Virginia) & AWS eu-west-2 (London) Courier • Customer Notification Delivery US DeepL SE • Automatic translation services (Customer Optional) Germany Merge • Platform Integration Tool (Customer Optional) US or EU (Sweden) North Virginia (AWS us-east-1) or Stockholm (AWS eu-north-1) Updates View all Privacy OMNEA - New Sub-processor Notification Published January 7, 2026 In order to continue delivering the excellent service you have come to expect from Omnea, we plan to engage the new sub-processors detailed below. Because these vendors may process your organisation's personal data in connection with the services Omnea provides, this communication shall serve as a notification that the below vendors will be added as new sub-processors of Omnea Limited. New Sub-processors DeepL SE (DeepL) Address: Maarweg 165, 50825 Cologne, Germany Data Hosting Location: Germany Services: Automatic translation services (Customer Optional) Data Categories Processed: Form configuration text, user-submitted form responses Effective Date: On Customer's instruction Catamorphic Co. (dba LaunchDarkly) Address: 1999 Harrison Street, Suite 1100, Oakland, CA 94612, USA Data Hosting Location: Germany Services: Feature management platform Data Categories Processed: Email address, name, role, organisation name, user department Effective Date: 6 February 2026 Our Engagement of New Sub-processors Omnea will be using DeepL for auto-translating form configurations and translating free text form responses. This service is optional and will only be used on your written instruction. Omnea will be using LaunchDarkly to help us safely release software updates, using feature flags and A/B testing. All information shared with these sub-processors is considered confidential and will be maintained and transferred in accordance with the terms of our data processing agreement. Further Information Omnea does not require you to take any action in relation to this notification. The sub-processors above are expected to provide data processing services as of the Effective Date. You have the right to object to the use of sub-processors. However, you must do so within ten (10) days of this notice or other such period as agreed in writing with Omnea. If you choose to object or have any other questions, please reach out to us at [email protected] and we will be glad to assist you with your request. General Update: Omnea Affiliate added Published June 23, 2025 An Omnea affiliate entity (Omnea Inc., US) has been added to our list of Subprocessors & Affiliates Subprocessor Type Omnea Omnea’s security & compliance principles guide how we deliver our products and services, enabling people to simply and securely access our platform which empowers modern businesses to streamline procurement processes in one AI-native workspace. [email protected] Privacy PolicyOpens in new tab Filter by Compliance SOC 2 UK Cyber Essentials GDPR SOC 1 Resources View all Compliance Cyber Essentials Certificate of Assurance Dec 2025 SOC 2 Bridge Letter - 2026 SOC 2 Type II Report June 2026 SOC 1 Type II Report June 01, 2025 - June 30, 2026 Penetration Tests Penetration Testing Report Nov 2025 Policies Security as a Company Value Access Control Policy (EN) Asset Management Policy (EN) Code of Conduct (EN) View 13 more Miscellaneous Architecture Diagram Third Party Service Providers Third Party Service Providers Other resources Background Check Policy AI Policy AIMS Governance Policy Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 18 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 8 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 30 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Infrastructure hosting; AI model inference and processing via Amazon Bedrock US, UK AWS us-east-1 (North Virginia) & AWS eu-west-2 (London) Courier • Customer Notification Delivery US DeepL SE • Automatic translation services (Customer Optional) Germany Merge • Platform Integration Tool (Customer Optional) US or EU (Sweden) North Virginia (AWS us-east-1) or Stockholm (AWS eu-north-1) Updates View all Privacy OMNEA - New Sub-processor Notification Published January 7, 2026 In order to continue delivering the excellent service you have come to expect from Omnea, we plan to engage the new sub-processors detailed below. Because these vendors may process your organisation's personal data in connection with the services Omnea provides, this communication shall serve as a notification that the below vendors will be added as new sub-processors of Omnea Limited. New Sub-processors DeepL SE (DeepL) Address: Maarweg 165, 50825 Cologne, Germany Data Hosting Location: Germany Services: Automatic translation services (Customer Optional) Data Categories Processed: Form configuration text, user-submitted form responses Effective Date: On Customer's instruction Catamorphic Co. (dba LaunchDarkly) Address: 1999 Harrison Street, Suite 1100, Oakland, CA 94612, USA Data Hosting Location: Germany Services: Feature management platform Data Categories Processed: Email address, name, role, organisation name, user department Effective Date: 6 February 2026 Our Engagement of New Sub-processors Omnea will be using DeepL for auto-translating form configurations and translating free text form responses. This service is optional and will only be used on your written instruction. Omnea will be using LaunchDarkly to help us safely release software updates, using feature flags and A/B testing. All information shared with these sub-processors is considered confidential and will be maintained and transferred in accordance with the terms of our data processing agreement. Further Information Omnea does not require you to take any action in relation to this notification. The sub-processors above are expected to provide data processing services as of the Effective Date. You have the right to object to the use of sub-processors. However, you must do so within ten (10) days of this notice or other such period as agreed in writing with Omnea. If you choose to object or have any other questions, please reach out to us at [email protected] and we will be glad to assist you with your request. General Update: Omnea Affiliate added Published June 23, 2025 An Omnea affiliate entity (Omnea Inc., US) has been added to our list of Subprocessors & Affiliates Read more about OMNEA - New Sub-processor Notification Omnea Omnea’s security & compliance principles guide how we deliver our products and services, enabling people to simply and securely access our platform which empowers modern businesses to streamline procurement processes in one AI-native workspace. [email protected] Privacy PolicyOpens in new tab Filter by Compliance SOC 2 UK Cyber Essentials GDPR SOC 1 Resources View all Compliance Cyber Essentials Certificate of Assurance Dec 2025 SOC 2 Bridge Letter - 2026 SOC 2 Type II Report June 2026 SOC 1 Type II Report June 01, 2025 - June 30, 2026 Penetration Tests Penetration Testing Report Nov 2025 Policies Security as a Company Value Access Control Policy (EN) Asset Management Policy (EN) Code of Conduct (EN) View 13 more Miscellaneous Architecture Diagram Third Party Service Providers Third Party Service Providers Other resources Background Check Policy AI Policy AIMS Governance Policy Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 18 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 8 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 30 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Infrastructure hosting; AI model inference and processing via Amazon Bedrock US, UK AWS us-east-1 (North Virginia) & AWS eu-west-2 (London) Courier • Customer Notification Delivery US DeepL SE • Automatic translation services (Customer Optional) Germany Merge • Platform Integration Tool (Customer Optional) US or EU (Sweden) North Virginia (AWS us-east-1) or Stockholm (AWS eu-north-1) Updates View all Privacy OMNEA - New Sub-processor Notification Published January 7, 2026 In order to continue delivering the excellent service you have come to expect from Omnea, we plan to engage the new sub-processors detailed below. Because these vendors may process your organisation's personal data in connection with the services Omnea provides, this communication shall serve as a notification that the below vendors will be added as new sub-processors of Omnea Limited. New Sub-processors DeepL SE (DeepL) Address: Maarweg 165, 50825 Cologne, Germany Data Hosting Location: Germany Services: Automatic translation services (Customer Optional) Data Categories Processed: Form configuration text, user-submitted form responses Effective Date: On Customer's instruction Catamorphic Co. (dba LaunchDarkly) Address: 1999 Harrison Street, Suite 1100, Oakland, CA 94612, USA Data Hosting Location: Germany Services: Feature management platform Data Categories Processed: Email address, name, role, organisation name, user department Effective Date: 6 February 2026 Our Engagement of New Sub-processors Omnea will be using DeepL for auto-translating form configurations and translating free text form responses. This service is optional and will only be used on your written instruction. Omnea will be using LaunchDarkly to help us safely release software updates, using feature flags and A/B testing. All information shared with these sub-processors is considered confidential and will be maintained and transferred in accordance with the terms of our data processing agreement. Further Information Omnea does not require you to take any action in relation to this notification. The sub-processors above are expected to provide data processing services as of the Effective Date. You have the right to object to the use of sub-processors. However, you must do so within ten (10) days of this notice or other such period as agreed in writing with Omnea. If you choose to object or have any other questions, please reach out to us at [email protected] and we will be glad to assist you with your request. General Update: Omnea Affiliate added Published June 23, 2025 An Omnea affiliate entity (Omnea Inc., US) has been added to our list of Subprocessors & Affiliates