Trust
How We Handle Your Data
Last updated: 24 October 2026
The short version: Omniron reads your customers’ emails, checks each one for complaints and signs of vulnerability, and saves a record that only your firm can see. A person at your firm decides every flag. Your data stays yours: it is never used to train AI, and it is returned to you in full if you leave.
Before Any Real Customer Email Is Read
Omniron does not yet read any firm’s real customer emails. Today the AI check is used only with made-up test emails. Before it reads real ones, the AI check moves to Claude on Amazon Web Services in London (eu-west-2). We will update this page the day that happens.
What Happens to Each Email
- A customer emails the inbox your firm chose to have monitored.
- Omniron reads it, and removes card numbers and UK bank details before anything else happens.
- The AI checks it for complaints and signs of vulnerability, and suggests a deadline and a next step.
- The email, the AI’s suggestion and the time are saved as a record for your firm.
- A person at your firm confirms or corrects each flag. Their name, the time and any disagreement with the AI are kept.
For a Microsoft 365 inbox, your IT admin approves read-only access to the 1 monitored mailbox. Omniron can never send, move or delete an email, and your firm can remove the access at any time.
Where Each Part Runs
| What | Who runs it | Where |
|---|---|---|
| Reading the monitored inbox | The Omniron server, on Google Cloud | London |
| Your records and claim files | Supabase, on Amazon Web Services | London |
| The AI check | Today: made-up test emails only, on Anthropic. Before any real customer email is read: Claude on Amazon Web Services | Moving to London (see below) |
| The dashboard | Vercel, which builds each page from your records when you open it | Nothing is stored there |
| Alert emails | Sent from Omniron's email to the address you choose | No customer details in them |
Who Can See Your Records
- The people at your firm who have a login. Each firm can only ever see its own records.
- For an appointed representative: its principal firm, only if the appointed representative has agreed in writing. The principal can read the records but not change them.
- Omniron staff, only to set up and support your firm’s service.
Your Data, Not Ours
- Your firm owns your customer data and the records about your customers. Omniron uses them only to run your service.
- Neither Omniron nor its AI provider uses your data to train AI models.
- If you leave, all of your data is returned to you, in files you can open without Omniron, and then deleted.
- Your firm is the controller of your customers’ data, and Omniron is your processor. The details are in the data processing agreement we sign with you, which we are happy to share before you decide.
If Something Goes Wrong
If any part of the service stops, we tell you the same working day, and afterwards we catch up every email that arrived in the meantime. If anything ever puts your customers’ personal data at risk, we tell you promptly, as your data processing agreement sets out, so you can meet your own duties.
Questions
Your compliance lead or IT contact can ask us anything about this at enquiries@omniron.co.uk. For how we use the details of people who visit this website or book a demo, see our Privacy Policy.