Buyer's pack · Updated 1 November 2026
What your DPO, security and accessibility leads will ask for.
Five documents, ready before you ask. your data stays in your own region, nothing you or your customers send is used to train AI models, and the chat widget meets WCAG 2.2 AA.
Security summary
Encryption, access control, backups, retention and how changes are tested.
Where data is hosted
Deployed in your region, such as AWS London for the UK. The sub-processors, what each receives, and where.
Widget accessibility statement
How the chat widget meets WCAG 2.2 AA, how it was tested, and how to report a problem.
Data processing agreementDownload
UK GDPR Article 28 terms, with the processing details, security measures and sub-processors as schedules. Word.
DPIA templateDownload
The ICO's seven steps with our side of the processing completed, and space for your purposes, lawful basis and sign-off. Word.
Security questionnaire, or something not covered here? Email hello@mg12.design. Syntalyze is made by MG12 Design, 30 Parrys Lane, Bristol, BS9 1AA.