Security

What you can verify during a pilot

European requirements

NIS2DORA

Citeqly helps teams complete seller-side security questionnaires. Answers can be mapped to NIS2 supply-chain and DORA ICT third-party themes. It does not replace legal advice or a full GRC control library.

Data hosting

Production pilot data is stored in Neon Postgres in AWS Europe Central (Frankfurt). The application is hosted on Vercel.

Model usage

Drafting uses the OpenAI API with retrieved passages from documents you upload. Customer content is not used to train Citeqly’s models or any third-party foundation model. A DPA is available for paid pilots.

Approval and retention

Export requires named human approval. Citations, the approving user and timestamp are retained for the pilot report. Pilot workspaces can be deleted on request after the engagement.

See it in the product

Upload documents, draft a questionnaire, approve answers and export to Excel. The insights page includes a time-saved estimate for the pilot.