Built for work that has to be right
Our products handle tax documents and health information. This page explains how we protect that data and how we use AI responsibly. Each product's own privacy policy has the full detail for that product.
How we protect your data
An EU company
GENY SYSTEMS S.R.L. is registered in Bucharest, Romania, and operates under the GDPR. eDecont.ro hosts personal data in the European Union.
Secure access
Passwords are stored as one-way hashes, sessions use signed tokens, and sign-in endpoints are rate limited.
Role-based access
Organisations control who can see and do what. People only reach the data their role needs.
Audit logging
Significant actions are recorded with time and author, so organisations can review who did what.
Data minimisation
We collect what a product needs to do its job and explain each purpose in that product's privacy policy.
Your rights
You can ask for access, correction or deletion of your personal data. Write to info@geny.ai and we will respond within the time the GDPR sets.
How we use AI
AI makes our products useful. These principles keep it accountable.
Transparent about AI
We say where AI is used and which providers process data, in each product's privacy policy. For example, eDecont.ro reads receipts with AI models hosted in Microsoft Azure.
People stay in control
Consequential steps keep a person in the loop: expense reports go through approvals in eDecont, and genyHealth reports are information to discuss with a physician, not a diagnosis.
Checked, not trusted
AI output is validated against rules and source data, such as fiscal codes and VAT rules in eDecont, before it is relied on.
Defended against misuse
The genyHealth AI assistant is built with defences against prompt injection, and its health guidance is grounded in a curated knowledge base.
Found a vulnerability?
If you believe you have found a security issue in geny.ai, eDecont.ro or genyHealth.ai, please email info@geny.ai with the details and steps to reproduce. Please give us reasonable time to fix it before disclosing it publicly.
We will acknowledge your report, keep you informed while we investigate, and credit you if you wish once the issue is fixed.
Questions about security or data?
We are happy to walk your team through how a product handles your data.