Trust & architecture
Who operates Galyct and where your data is processed.
This page brings together, in one place, the publisher, the hosting, the AI engine, the email service, transfers, encryption and data retention, with the providers, countries and dates.
Last updated: 12 September 2026. This page is our trust reference: every statement on it is kept up to date, dated and reviewed at least every six months. A question about our commitments? Write to us.
Your data is hosted in France, with Scaleway
Processing and storage take place in France, within the European Union. No transfer to a third country is initiated by Galyct in the standard configuration; any activation at your initiative is governed by the safeguards of Article 46 of the GDPR.
AI: where and why it is used
Galyct relies on Mistral, a French model, for conversational assistance and summaries. Mistral (France / EU) is the artificial intelligence engine selected by default. Primary hosting is located in France, with Scaleway. By default, processing takes place in France or in the European Union, with Mistral as the artificial intelligence engine. No service located outside the European Union processes your personal data by default; where a module provides for this, its activation is explicit, at the client’s initiative, logged, and governed by the safeguards of Article 46 of the GDPR, with the provider concerned named in the register of subcontractors.
A European engine
The conversational engine runs on Mistral (France), a European alternative to models operated outside the European Union.
You stay in control
AI assistance is explicit and governed: it informs your decisions, it does not make them for you.
A clearly defined role
Assistant, incident summary, contextual help. Technical analyses remain traceable and verifiable.
Few third parties, each one bound by contract
We deliberately limit the number of providers. Each one is bound by a contract compliant with Article 28 of the GDPR and accesses data only to the extent strictly necessary.
Hosting
Scaleway / Online S.A.S. (Dedibox), infrastructure in France.
Transactional email
Scaleway Transactional Email (TEM). Sends the service’s notifications and emails, within the EU.
Mistral AI
Mistral conversational engine (EU), under human supervision.
Payment
Stancer (France, European Union). Processes card payments; card details are entered with Stancer and do not pass through our servers.
The list of subcontractors is kept up to date; we provide it on request at contact@galyct.io and as part of business contracts (DPA, Art. 28).
Your data is not kept longer than necessary
Retention periods follow the purpose and legal obligations. Deletion is effective, with a safety window against accidental erasure.
Controlled retention periods
Active retention during use, then intermediate archiving until the legal time limits, then deletion.
30-day recycle bin
A deleted item can be recovered for 30 days (restore window), then permanently purged.
Your rights
Access, rectification, erasure, portability: exercised from your account or by simple request.
Encryption and least privilege
Security is not a marketing argument: it is a daily practice, from data in transit to internal access.
Hardened security headers (HSTS, CSP, protection against framing), protected forms (origin check, rate limiting, anti-bot trap). An independent verification can be carried out as part of a contractual audit.
Who is behind Galyct
Galyct is published by an identified French firm, listed by the French public victim assistance scheme.
Publisher
Datashield Risk Consulting, a simplified joint-stock company (SAS), registered in the Lyon Trade and Companies Register (RCS) under number 984 134 916, 16 rue Cuvier, 69006 Lyon. The company that publishes the Galyct, Galyct Pro and Galyct Perso brands.
Public listing
Datashield Risk Consulting, publisher of Galyct, is a provider listed on Cybermalveillance.gouv.fr. The listing applies to a provider that has signed up to the scheme’s charter; it is not a certification of the product.
To find out more: Privacy · Legal notice · Pro terms of sale · Perso terms of sale.
A question about our commitments?
Security, hosting, data processing agreement (DPA), audit: we give precise answers.