Last updated: 14 August 2026
This notice explains how DANTUM AI Limited ("Dantum", "we") handles personal data in connection with this website and the Dantum workflow-pipeline service. It is written to be read, not to be survived.
DANTUM AI Limited, registered in England & Wales, company number 17378775. Registered office: 178 Gilbert Road, London, United Kingdom. General contact: sales@dantum.ai. Data protection contact: help@dantum.ai.
This site sets no analytics, advertising or tracking cookies, and we do not profile visitors. It loads no third-party fonts, scripts, tag managers or embedded media, so browsing these pages sends your data to nobody but the server hosting them. The sample figures shown on our home page are invented and contain no customer information.
If you email us, we keep the correspondence for as long as needed to deal with your enquiry and for a reasonable period afterwards, then delete it. Our lawful basis for handling enquiry correspondence is legitimate interests — responding to someone who contacted us.
When an organisation uses the Dantum service, we process email and document content from the mailboxes they connect to us. That content can include personal data about their staff, their customers, their suppliers and their counterparties. We process it only to classify, extract, log and reconcile operational information, and only on that organisation's documented instructions.
For this data the customer organisation is the data controller and Dantum is a processor, under a written data processing agreement that sets out the subject matter, duration, nature and purpose of the processing, the categories of data subject, and our obligations under Article 28 UK GDPR. We do not decide what is processed or why.
The service uses a language model to classify messages and extract fields. It does not make decisions with legal or similarly significant effects about individuals. Business logic — comparisons, calculations and record updates — is executed in deterministic code, not generated by a model, and every classification carries a confidence score. Anything falling below the customer's configured threshold is routed to a person at the customer organisation for review before any action is taken.
We use the following sub-processors to deliver the service. Customers are notified before we add or replace one.
| Sub-processor | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Application hosting, storage, database, secret management and logging | United Kingdom (europe-west2) |
| Google (Gemini models) | Message classification and field extraction | Configured to a European region |
| Google Workspace / Microsoft 365 | Reading from and writing to the mailboxes and files the customer connects | Determined by the customer's own tenancy |
Content sent to the model provider for classification and extraction is not used to train that provider's models under the terms of our agreement with them.
Customer data is processed in the United Kingdom. Where any supporting service involves a transfer outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on adequacy regulations where they apply.
Access to a customer's mailboxes is scoped to the specific mailboxes agreed and enforced at the identity-provider level. The service uses short-lived, runtime-issued credentials rather than long-lived API keys, and secrets are held in a managed secret store. Documents are stored privately and shared only with the processing service account. We will notify affected customers without undue delay if we become aware of a personal data breach affecting their data.
Under UK GDPR you may have the right to access, correct, erase or restrict the processing of personal data about you, to object to processing, and to data portability.
If your data reached us through a customer's mailbox, that customer is the controller and you should contact them first — we will support them in responding. For data we hold as a controller, such as enquiry correspondence, email help@dantum.ai and we will respond within one month.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk. We would rather you raised it with us first, but that is your choice, not a precondition.
We post any changes to this notice on this page and update the date at the top. Material changes affecting customers are notified directly.