Compliance, without the fog.

01Our approach

We describe only what is true. Reges runs on your hardware, and your data does not leave your network unless you ask it to. That makes many compliance questions simpler, but it does not make Reges “certified”.

Reges and RegesCore-Ai do not hold SOC 2, ISO 27001 or HIPAA certification or attestation, and we do not claim them. We are happy to walk your compliance team through exactly how Reges is installed and where every piece of data lives.

02Data residency: your hardware

• Reges Desktop: data is processed and stored on the PC it is installed on.
• Reges for Business: data is processed and stored on the workstation or server in your office.
• We do not host your data. There is no Reges cloud that receives your documents, audio, video or conversations.

Data only leaves your hardware when a user asks for it: web research, a connector you enabled (for example GitHub or Meta), or a cloud AI model you chose to configure. Each of those is under your control and can be switched off.

03GDPR

Roles

• For data you process in Reges on your own hardware, you are the controller. We have no access to it.
• For our website, forms, sales and support, we are the controller. See the Privacy Policy.
• When we install or support Reges for Business and can see personal data on your systems, we act as your processor.

Data processing agreement

A data processing agreement (DPA) is available for Reges for Business customers. It covers what we may access during installation and support, confidentiality, security measures, sub-processors (by default we use none for work on your systems), assistance with data subject requests, breach notification, deletion at the end of the engagement, and international-transfer safeguards where needed. Ask for it through the contact form.

Face recognition

A face template can be biometric (special category) data. Reges stores it locally and uses it to recognise the owner. If you deploy face recognition for staff, you need a lawful basis, typically explicit consent, and should record it in your records of processing. Face recognition can be left switched off; everything else works without it.

Data subject requests

Because the data is on your hardware, you can find, export and delete it there. We can help as part of a Care plan.

04CCPA / CPRA

We do not sell personal information and do not share it for cross-context behavioural advertising. California residents can use their rights to know, delete and correct as described in the Privacy Policy, without discrimination.

When we provide services to a Business customer, we act as a service provider: we use personal information only to perform those services and as the law permits.

05Health and financial data

Reges is not HIPAA certified. If you are a covered entity or business associate, or you are regulated in the financial sector, talk to us before using Reges with protected health information or regulated client data, so we can go through your requirements together. Local processing helps, but your own safeguards and policies still apply.

06Responsible AI

• Actions that leave the machine or cannot be undone wait for a person’s explicit confirmation.
• Document answers show their sources, so staff can check them.
• AI output can be wrong and is not professional advice; people stay responsible for decisions.
• You choose the model, and can document which one you use and where it came from.

07What we can give your compliance team

• A description of the installation, data flows and network exposure.
• The security overview and threat model.
• The list of open-source components and licences.
• Our DPA, for Reges for Business.

08Accessibility statement

We want regescore.pro to work for everyone, and we aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA.

What we do

• Every page can be used with a keyboard, with a visible focus indicator and a “Skip to content” link.
• Form fields have labels, errors are announced and linked to their fields, and results are announced to screen readers.
• If your system asks for reduced motion, the 3D scene stops animating and text appears without animation.
• Headings and landmarks structure every page; images have text alternatives; decorative graphics are hidden from assistive technology.
• Text is set in high contrast on a dark background, and pages work when zoomed to 200% and on small screens.

Known limitations

• The 3D scene on the home page is decorative. Everything it shows is also described in text.
• Some secondary text uses lower contrast for visual hierarchy; tell us if any of it is hard to read.
• In the Reges software, hand gestures are optional: the same controls work with a mouse or by voice.

Feedback

If something is hard to use, tell us through the contact form or at info@likeakinginc.com. We read every report and will try to fix the problem or give you the information another way.