Trust Center

Institutional trust requires visible responsibility.

The BLACK& Trust Center connects legal identity, governance, privacy, responsible AI, research standards, security principles, incident reporting and official contact channels.

Trust register

This directory separates operative public policies, documented operating positions and controls still pending formal publication. Each linked record identifies scope, owner, version, review status and material limitations.

  • Security and access
  • Data, privacy and retention
  • Subprocessors and data residency
  • Incident response
  • Responsible disclosure
  • AI transparency and provider inventory
  • Document and policy register

Identity and governance

BLACK HOLDINGS S.R.L. is the legal entity trading as BLACK&. BLACK& is overseen by a six-person Board. Detailed ownership, committee and delegated-authority disclosures are published only when legally reviewed and approved.

Current operational position

The BLACK& Board environment uses authenticated access and role-aware application permissions. The Trust Center does not represent those measures as an external certification or independent assurance report. Technical claims remain limited to controls that have been approved for public description.

Privacy and data

The current public privacy position covers purpose limitation, controlled access, retention review and rights requests. The detailed record identifies what is documented, what requires system-specific confirmation and how to contact the responsible owner.

AI transparency

AI-supported work retains authorized human review. The AI transparency record distinguishes intended use, model-provider disclosure, provider inventory, data handling, limitations and applications that require human authority.

Security reporting

Security concerns may be submitted to hq@blackandi.com with the subject ‘Security — Confidential’. The responsible-disclosure record explains safe reporting, acknowledgment and disclosure boundaries. Do not send exploit data, credentials or unnecessary personal information through an unapproved channel.

Assurance and certifications

No external security certification is claimed on this Trust Center unless the certificate, scope, issuing body and validity period are published. The absence of a listed certification must not be interpreted as certification.