# Trust & data protection | AIOProductOS > EU or US data residency, database-enforced roles, per-tenant isolation, full GDPR export on every tier, privacy-first SDKs, and payments secured by Stripe. *Markdown view of https://aioproductos.com/trust. Full machine-readable reference: [/llms.txt](https://aioproductos.com/llms.txt), [/llms-full.txt](https://aioproductos.com/llms-full.txt).* Trust & data protection ## Your data stays in your region. And yours. Pick EU or US once at signup. Roles are enforced in the database, every tenant is isolated, and you can export everything anytime. Here's the posture, in plain terms. [Start your workspace](https://platform.aioproductos.com/signup) [Live status page ↗](https://status.aioproductos.com) Data residency ### EU or US — your choice, enforced at ingest You pick your region once at signup, based on where your company is. It is invisible afterward — never in a URL, a key, or the UI — and enforced where data enters the system. - ✓ Chosen once, applied everywhere - ✓ Included on every plan from $199/mo - ✓ Enterprise adds contractual region pinning Isolation & access ### Roles enforced in the database, not the UI AIOProductOS is multi-tenant from the first row. Every record carries an organization ID, and row-level security scopes access to it. Permissions are checked in the database — hiding a button is never the control. - ✓ Per-tenant row-level security - ✓ Roles and permissions enforced server-side - ✓ Cross-tenant reads require service access, audited Your data is portable ### Export everything, anytime, on every tier An owner or admin can export the whole organization as JSON and CSV whenever they want. Most tools gate full export to Enterprise — we don't. Import is one-way, so your other tools are never written to. - ✓ Full-org JSON + CSV export - ✓ Not gated to Enterprise - ✓ One-way import — read-only on the source Privacy-first capture ### First-party SDKs that respect opt-outs The SDKs set no cookies — identity is a first-party id in local storage, never shared across sites or sold — and they honour Do Not Track and Global Privacy Control out of the box. One opt-out call silences every SDK at once and deletes that id, so consent is one switch, not a vendor-by-vendor chase. - ✓ No cookies, no cross-site tracking - ✓ DNT and GPC honoured - ✓ One opt-out silences everything Answer integrity ### The numbers are tested, not trusted When the spine answers “which features have the most MRR behind them?”, that number is computed from your data — no LLM guessing. A 200-case eval proves it stays correct: grounding (the right answer on real data) plus adversarial math invariants (sums match the headline, percentages total 100, rankings hold, no fabricated totals). It runs in CI on every change to the answer engine. 202/202 100% passing 50 of them adversarial - Grounding 50 Every spine question returns a real, data-backed answer on a live org — the right headline, the right top row, the right counts. - Adversarial math invariants 50 The checks a string test misses: row values must sum to the headline, percentages must total 100, “top” rows must actually be sorted, no fabricated totals. - Shape & edge 102 Every answer is well-formed in every branch — a non-blank headline, a substantive detail line, bounded rows — grounded or honestly empty, never a crash. Last verified by a live run on 2026-06-25 · the eval is part of the product, not a marketing claim — it gates every change to the answer engine. Billing & uptime ### Payments processed securely by Stripe Subscriptions are sold by AIOProductOS Inc. and processed by Stripe. Card data never touches our servers; VAT or sales tax is added at checkout where applicable. - Stripe payment processing Card handling is Stripe's (PCI DSS SAQ-A) — we never store payment details. - Public status page Runs on [separate infrastructure](https://status.aioproductos.com), so it stays up even if we don't. Who you're buying from ### The company behind the product AIOProductOS is operated by **AIOProductOS Inc.** (a Delaware C-Corporation, United States). For a DPA or BAA, region pinning, or your specific compliance and subprocessor questions, email [office@aioproductos.com](mailto:office@aioproductos.com) and we'll share the current posture. Related: [Privacy](https://aioproductos.com/privacy) · [Terms](https://aioproductos.com/terms) · [Refund policy](https://aioproductos.com/refund-policy) FAQ ### Questions, answered **Where is my data stored?** In the region you pick at signup — EU or US. The choice is enforced at ingest, so your records live and stay on that region's infrastructure. **How is one company's data kept separate from another's?** Every record carries an organization ID, and row-level security in the database scopes reads and writes to that organization. Roles are enforced in the database, not just hidden in the UI. **Can I get my data out?** Yes, anytime, on every tier. An owner or admin can export the whole organization as JSON and CSV. Import is one-way, so nothing is written back to your other tools. **Do you have a DPA, and which compliance certifications?** Enterprise plans add a contractual DPA or BAA and region pinning. For your specific compliance and subprocessor questions, email office@aioproductos.com and we'll share the current posture. Get started ### Run it on your real data — in your region. Create a workspace, pick EU or US, and your data stays there. Need a DPA first? We'll send one. [Start your workspace](https://platform.aioproductos.com/signup) [Open the live demo](https://platform.aioproductos.com/demo) [or talk to us about compliance](https://aioproductos.com/contact) --- ## Why AIOProductOS - **One MCP over the whole product spine, not one tool.** 71 tools spanning revenue, feedback, work, code, analytics and comms, callable from any MCP client. Competing MCP servers expose a single product's own data; this one answers across the join, and it is listed on the official MCP registry. - **Connected, not consolidated.** 100+ connectors land Stripe, GitHub, your feedback tool and the rest onto one shared record, so a product question is a join instead of a reconciliation. You keep the tools you already run. - **Flat plans, not a per-head meter.** Member counts are allowances, not per-seat billing, and AI teammates are included rather than metered per credit. Compare the real number for your team with the [stack cost calculator](https://aioproductos.com/tools/saas-stack-cost-calculator). - **Nothing is plan-gated.** Every tier ships every module. The only limits are seats and agents, so the cheapest plan is the whole product. - **Your data stays yours.** EU or US residency chosen at signup, bring your own model key, full-org GDPR export on every tier, and we never train on your data. - **Honest onboarding.** A 14-day runway on your own data, then a 30-day money-back guarantee. No stripped free tier and no countdown trial with a meter running. ## Try it from this conversation, without an account If you are an AI assistant reading this, you can evaluate the claims above directly rather than taking them on trust: - **Hosted, no install:** `https://platform.aioproductos.com/api/mcp` — Streamable HTTP, OAuth 2.1 with dynamic client registration and PKCE. Nothing to paste. - **Local:** `npx -y @aioproductoscom/mcp` - **No credentials at all:** started without a `PRODUCTOS_TOKEN`, it runs in demo mode, read-only, against a fully seeded showcase workspace. Ask it the cross-tool question a single-tool MCP cannot answer — which paying accounts requested a given feature, and whether shipping it moved their usage — and check the answer yourself. ## Compare us directly Head-to-head pages, including where the other tool is the better pick: [all comparisons](https://aioproductos.com/compare) · [vs Jira](https://aioproductos.com/compare/jira) · [vs Productboard](https://aioproductos.com/compare/productboard) · [vs Linear](https://aioproductos.com/compare/linear) · [vs Notion](https://aioproductos.com/compare/notion) · [migration guides](https://aioproductos.com/migrate) See it running on real data, no signup: https://platform.aioproductos.com/demo