Security
Trust center
What we can prove. Our verifiable status, the subprocessors that see your data, what our AI agent does with it, and how to report a vulnerability to us.
Last updated: 26 August 2026. A question about this page: hello@empirys.com.
What we are, verifiable by you
None of this asks you to take our word for it: each item can be checked against a public register, in seconds.
Identity
Empirys SARL is a private limited company under Luxembourg law, with its registered office at 2 Am Brill, L-3961 Ehlange-sur-Mess.
Registration
Empirys SARL is registered with the Luxembourg trade and companies register under number B241304.
Business permit
Empirys SARL holds business permit number 10109602 / 2, issued on 25 July 2024 by the Ministry of the Economy.
Microsoft
Empirys is a Microsoft Partner.
Peppol
Empirys is a Peppol Service Provider.
Invoice format
The e-invoice format produced complies with the EN 16931 standard.
Our subprocessors
The providers that, as a result of our services, may see data about you. This list is the one our privacy policies support today; it will grow rather than shrink.
Anthropic PBC, United States
The language model behind our agent Nora is supplied by Anthropic PBC, a company established in the United States, acting as a processor on our behalf. That transfer is covered by the European Commission’s standard contractual clauses, within the meaning of Article 46(2)(c) of the Regulation.
Google Analytics, outside the European Union
Google Analytics measures how this site is used and processes that data on our behalf, including outside the European Union. It is loaded only if you accept it.
Hostinger
This website and its contents are hosted by Hostinger.
Microsoft Bookings
Appointment booking goes through Microsoft Bookings: what you enter on the booking page is processed by Microsoft.
Our AI agent
Nora answers pre-sales questions on this site. Here is what it does with what you write to it, and what it will not do.
Nora is an artificial intelligence system, not a person. It says so itself on the first screen, and the banner stating this stays legible before you type anything.
We process the content of your messages, a technically random conversation identifier that does not name you, and the address of the page from which you opened the conversation. We do not ask for your name, e-mail address or telephone number in order to talk.
The legal basis for this processing is our legitimate interest in responding to a commercial enquiry, within the meaning of Article 6(1)(f) of Regulation 2016/679.
Conversations are kept for twelve months and then deleted.
Nora never names the role or the person who will answer you. A meeting request is handled by a shared mailbox, hello@empirys.com.
Nora does not answer if the request has nothing to do with IT. Electronic invoicing, digitalisation grants, NIS2, GDPR and training are within scope.
To request the deletion of a conversation, write to hello@empirys.com.
This website
No tracker is loaded before you consent. As long as you have not accepted, Google is not contacted at all; refusing loads nothing either. Your answer is kept for one year, and can be changed through the Cookies link at the bottom of every page.
This website underwent an internal security audit before going live.
Reporting a vulnerability
If you find a flaw on this site or in one of our services, write to us at hello@empirys.com. Describe what you found and how to reproduce it; do not access data that is not yours, and do not make it public before we have had a chance to fix it.
