Operational · monitored

Trust, security & privacy at Roumena.

Roumena is competitor intelligence for go-to-market teams — we watch companies and commercial signals, never people's private lives. Our documentation is available on request. The only publicly posted document is our Terms of Service.

Request access
GDPR
GDPRCompliant
SOC 2
SOC 2 Type IIIn progress
ISO
ISO 27001Planned

Documents

Access on request
Terms of ServiceGoverns use of Roumena. German law.
Data Processing Agreement (DPA)Art. 28 GDPR processor terms.
Standard Contractual ClausesEU SCCs for international transfers.
Subprocessor listCurrent subprocessors and locations.
Security OverviewArchitecture, tenancy isolation, controls.
Privacy OverviewHow we process data on your behalf.

Controls

Summary · details on request
Data protection

Customer data is isolated per tenant. We never expose your data, account list, or competitor set to another customer.

Encryption

Data encrypted in transit (TLS) and at rest. Secrets held in a managed secret store, never in source.

Access control

Least-privilege access to production, scoped credentials, and audited administrative actions.

Data scope

We monitor companies and commercial signals — not individuals' private lives, employment, credit, or housing.

Subprocessors

Vetted subprocessors only. 30 days' notice before adding one; you may object on data-protection grounds.

Resilience

Backups and export on demand. You can export your data from the platform at any time.

Need the full documentation?

Everything beyond our Terms of Service is available to our Enterprise and Hedge Fund customers under NDA.

Request access via email