Trust
Security, privacy and compliance
Trust you can verify for yourself.
@Human is software you run yourself. Your production data stays in your own infrastructure, the whole platform is open source so your security team can read it, and every AI decision is logged, approved and evidenced as you build.
How @Human keeps you in control
Security and governance are built into the platform from the very first line.
⌂
Software you run
@Human runs in your own cloud, private cloud or on-premises, inside the security controls you already have.
⛉
Your data stays with you
Production data stays in your estate. Planet Crust provides the software, and your records stay with you.
☰
100% open source
Your security team can read and verify the core themselves, and you stay free to choose.
⇄
Free choice of AI
Use any provider, EU-hosted or open models on your own servers, and switch in place. Core processes keep running with AI off.
✓
People approve
Accountable roles and signed approval gates keep a person in charge of every outcome that matters.
▤
Evidence by design
Runtime guardrails check every agent reply, and every trigger, decision and change is written to the event log.
Shared responsibility, clearly split
Because @Human runs inside your estate, security is shared. Here's who looks after what.
Planet Crust
We're responsible for
✓ The open-source @Human platform and its releases
✓ Testing code before it ships
✓ Built-in compliance mappings, kept current
✓ Support through Advanced and Enterprise plans
✓ Personal data collected by this website
Your organisation
You're responsible for
✓ Where @Human is hosted and how it's secured
✓ Your certifications, such as ISO 27001 or SOC 2
✓ Which AI providers and models you connect
✓ Who can access your instance and data
✓ The conformity of the AI systems you deploy
Built-in compliance mappings
Every AI system you build is classified and evidenced against the frameworks you answer to, release after release.
EU AI Act
ISO/IEC 42001
GDPR
UK frameworks
EU Charter (FRIA)
Your own frameworks
@Human supports evidence-based risk management, data governance, human oversight, logging and records. Conformity remains the responsibility of the deploying organisation.
Your questions, answered
Is Planet Crust ISO 27001 or SOC 2 certified?
Because @Human runs inside your estate and your production data stays entirely with you, it operates within the scope of your own certifications. We can share a shared-responsibility and security statement during evaluation.
Is @Human SaaS?
@Human is software you run. It runs in your own infrastructure, in the cloud you choose or on-premises, inside your existing security controls.
Does @Human make us compliant with the EU AI Act?
@Human supports evidence-based risk management for the EU AI Act and ISO/IEC 42001. Conformity remains the responsibility of the deploying organisation.
What happens if our AI provider goes down?
Core processes are programmatic, so forms, records, rules, approvals and reports keep running with AI on or off.
Report a security issue
Found a vulnerability in @Human or this website? Email us with “Security” in the subject line, and please keep the details private until we've responded.
Email info@planetcrust.comWho we are
Crust Technology Limited, the company behind Planet Crust and @Human, Unit 1G, The Atrium, Blackpool Business Park, Blackpool, Cork, Republic of Ireland. Our lead data protection authority is the Data Protection Commission in Ireland.