Legal notice

Site publisher: Arthur DENIS, individual, company incorporation in progress (France).
Contact: contact@cemply.io

Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, vercel.com. Database: Neon (project hosted in Frankfurt, Germany, EU).

Nature of the service: Cemply is a software tool that helps manufacturers organise their Cyber Resilience Act compliance work. It is not a law firm, not a notified body, and does not certify products. Compliance obligations remain the manufacturer's own; Cemply provides tooling and evidence, not legal advice or guarantees of conformity.

Contractual terms: the supply of the service is governed by our terms of service, which set out what the service does, its limits, and the liability of each party.

Privacy policy

What we collect and why

Waitlist: your email address, only to keep you informed about Cemply. Accounts: your email, name, company name and the data you submit (products, dependency manifests, scan results), processed solely to provide the service. Legal basis: consent and contract performance (art. 6.1.a/b GDPR). No advertising trackers; anonymous, cookie-less audience measurement only.

Where your data lives

Application data is stored in the EU (Frankfurt, Germany) with our processor Neon, and the server code that processes it runs in the same region (Frankfurt) on Vercel. Vercel is a US company and operates the global network that delivers the site, so some transfers outside the EU remain possible; they are covered by standard contractual clauses.

Retention and your rights

Waitlist emails: deleted at the latest 3 years after collection if you never create an account. Account data: deleted upon account deletion request. Every email includes an unsubscribe link. Rights of access, rectification, erasure, objection and portability: contact@cemply.io (answer within 30 days). You may lodge a complaint with the French supervisory authority, CNIL (cnil.fr).