Legal and operating framework COL-COMP-001
Compliance and regulatory framework
An overview of rules relevant to Colonela and the boundaries of the technical service.
- Status
- Public operating version
- Version
- v1.1
- Publication date
- 23. 8. 2026
- Document ID
- COL-COMP-001
- Language
- EN — informative translation
- Operator
- DAOUBO DAO, LLC
This is the current public version. A material change creates a new version and is recorded in the change history.
GDPR — personal data protection
We comply with the General Data Protection Regulation (GDPR). For you this means clear rights (access, rectification, erasure, portability, objection), data minimisation, storage exclusively in the EU, and the option to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ, Pplk. Sochora 27, Prague 7). You can find the details in our Privacy Policy.
EU AI Act (high-risk, Annex III)
An AI agent supporting decisions in a legal context falls under the EU AI Act among high-risk systems (Annex III). We therefore meet stricter obligations: risk management, transparency towards the user, continuous logging and an audit trail, and ongoing human oversight. There is never a fully automated decision — the agent only proposes, and you or your attorney decide. This protects you from having your case "decided by a machine".
eIDAS — identity and signatures
Through BlockID we offer verified digital identity and a qualified electronic signature (QES) under the eIDAS Regulation. A qualified signature has the same legal weight as a handwritten one. Together with a qualified time stamp, you can provably show who signed a document and that it existed at a given time.
Czech Act No. 85/1996 Sb. on the legal profession (§ 1)
Under § 1 of the Act on the legal profession, Colonela is a technical tool of the client. We do not provide legal services or legal advice and we do not replace an attorney. We help you organise and understand your case — the defence itself and the procedural steps you run with your attorney. This distinction protects you: you know exactly where the tool ends and professional legal work begins.
Data exclusively in the EU
Your data is stored and processed in the European Union — the web application in Frankfurt (Vercel), the database in Ireland (Supabase). Both providers are US companies, but stored data does not leave the EU. Queries you send to the AI assistant are processed by Anthropic (USA); using the assistant is optional.
Audit trail and accountability
Every significant step of the AI agent and every access to data is logged and explainable. This audit trail lets you and your attorney reconstruct what happened in the case and when, and who had access to what. Together with tamper-proof time records (a write-resistant ledger), you have a verifiable memory of your case — the Accountability pillar on which Colonela is built.