Trust Center
Company · data · security · AI
Prototype · status shown per answer
The answers
your security
team will ask.
Before the first call, in writing, with the status of each one: in place, drafted, or still to confirm.
17 answers. Tap a number to filter. Nothing here is rounded up.
01 · Questionnaire, pre-filled
Seventeen
answers.
The questions that come back in almost every vendor review. Copy them into yours, with the status attached.
- CompanyWho is the legal entity?in place
Voidgap UG (haftungsbeschränkt), Langenharmer Weg 172, 22844 Norderstedt, Germany
Source: Imprint → - CompanyWhere is it registered?in place
Register court Kiel, HRB 29104 KI. VAT ID DE460469375.
Source: Imprint → - CompanyWho is responsible?in place
Managing director: Maksym Strashnyy.
Source: Imprint → - CompanyAre you insured for professional liability?to confirm
to decide
- DataWhere does this website run?to confirm
Today’s site: Lovable and Supabase, EU (Frankfurt), per the current privacy policy. The new site: to decide
Source: Privacy → - DataDo you track visitors?to confirm
Only with your consent via our cookie banner: statistics without names or email addresses through Google Tag Manager, and with marketing consent Apollo, which recognises companies from the IP address. Without consent nothing is loaded.
Source: Privacy → - DataWhere is our project data processed?draft
In your infrastructure where possible, otherwise in the EU. to decide
- DataDo you train models on our data?draft
No. Not ours, and we choose providers whose terms exclude it. wording to confirm
- DataWhat happens to our data at the end?draft
Returned or deleted within … days · to decide, confirmed in writing.
- DataWhich subprocessors do you use?to confirm
A list per project, in the proposal. A standing list for the company: to decide
- SecurityHow do you get access to our systems?draft
Test accounts first, least privilege, named people. Production access only when the plan says so.
Source: How it starts → - SecurityDo you use MFA and encrypted devices?to confirm
to decide
- SecurityHow fast do you report an incident?draft
Within … hours · to decide to the contact named in the proposal.
- SecurityCan we run our own security review?draft
Yes. Send your questionnaire with the first message; we answer it before the proposal.
- AIDoes this website use AI?in place
Yes, in one place: Ask Voidgap answers questions from the pages of this site and says that it is an AI. In this prototype it runs on Claude by Anthropic.
Source: Ask Voidgap → - AIWhich AI tools do you use in projects?to confirm
Named per project in the proposal, with where they run. A standing list: to decide
- AIHow do you meet the AI Act yourselves?draft
AI literacy measures for our own team, an inventory of the AI we use, and transparency where people talk to AI. draft
Source: EU AI Act vs. ISO 42001 →
02 · Documents
Paper,
on request.
Pick what your procurement needs. The request travels with your brief, so nobody has to ask twice.
03 · Our own AI
We label
our own.
An AI consultancy that hides its own AI would be a bad start. One place on this site uses it, and it says so every time.
What visitors see
- Where
- Ask Voidgap
- Model
- Claude by Anthropic, in this prototype. Live site: to decide
- Grounding
- The search index of this site, nothing else
- Why the label
- Art. 50 AI Act: people must be told when they interact with an AI system, unless it is obvious
- Quality
- A public eval card on the page, run it yourself
Procurement ready
Ask the
hard one.
If your question is not on this page, it goes into the brief and gets answered before the proposal.