Privacy and Terms of Use

On this page, you will find information and documentation about Salaxy privacy policy, data security and terms of use.

​

Salaxy (Suomen Palkanlaskenta Oy / Payroll Finland Ltd., Helsinki) processes personal data strictly in line with applicable data protection law, including the GDPR (EU 2016/679), with each customer engagement governed by an Article 28 data processing agreement:

 

• Personal data is held only on secured servers with access restricted to staff who need it for their duties and bound by confidentiality, protected by strong electronic authentication, encrypted/secured handling, login logging, and regular testing of technical and organisational safeguards. 

• Data is not transferred outside the EU/EEA unless adequate safeguards are in place (an EU Commission adequacy decision or Standard Contractual Clauses)

• For the AI features specifically, a chat-based payroll agent built on AWS Bedrock AI and/or Google Vertex AI with Anthropic as model provider under GDPR Art. 28(4) processing agreements, the actual processing and storage take place within the EU, each controller's data is isolated, customer data is never used to train AI models or shared with third parties, and AI chat/interaction logs are kept for at most 90 days before anonymisation or deletion. 

• On the EU AI Act (EU 2024/1689), Salaxy treats its features as assistive only: they generate suggestions and summaries with a human-in-the-loop making all final payroll decisions (no legally significant automated decision-making), AI-produced values are clearly flagged, users are told when they are interacting with AI in line with the Act's transparency obligation, and Salaxy assesses the tools as falling outside the Annex III high-risk use cases while committing to reassess if the use case changes.