EN 
NL Security & trust
How we handle security and your data.
Large organisations ask the right questions before they let a partner near their systems or data. This page answers them honestly: what we do, what we use and what we do not claim.
Not SOC 2 or ISO 27001 certified (yet). We do not hold these certifications and we do not claim to. We work with these frameworks as a reference for good practice.
Our position on certification
Feels Like Home Media Ltd is a Bulgarian company inside the European Union. We are not SOC 2 or ISO 27001 certified. We design projects with NIS2, GDPR and the EU AI Act in mind: risk assessment, access control, logging, human oversight and data-processing agreements available on request. EU AI Act obligations are assessed for the intended use. This is not a certification or a blanket compliance guarantee.
Security practices
- Encryption in transitAll traffic to this website uses HTTPS (TLS), with HTTP redirected to HTTPS.Verified
- Multi-factor authenticationMFA on admin and provider accounts that support it.In place
- Least privilegePeople and systems only get the access a project needs, and access is removed when it is no longer needed.In place
- BackupsRegular backups of websites and project data, with restores tested.In place
- Bot and login protectionLogin and forms are protected against automated abuse.Verified
Subprocessors
These are the providers we use for our own website and communication. For client projects, the exact list is agreed per project.
| Provider | Purpose | Location |
|---|---|---|
| IONOS | Website hosting and DNS | EU |
| Zoho | Business email | EU data centre |
| Cloudflare Turnstile | Bot protection on login and forms | Global network |
| AI and voice providers for Lotte | Speech, language models and telephony | Per project, listed in the DPA |
Documents on request
Need a data-processing agreement (DPA) or want us to fill in your security questionnaire? Ask us via the contact page and we will send it.
