Trust
You keep the work. We hold the report, and you can take that with you too.
You are about to put your labels through this software. The reports it produces sit in your account, on European servers, yours to export whenever you want, and every point a report raises carries the rule behind it, and the article of law whenever that rule has one, so you can open the official text and read the sentence for yourself.
Who you are dealing with
cosmetiFULL is operated by Nicodemo & Signa Company Srl, registered in Romania, trade register J02/809/2003, VAT RO15617609, registered office Strada Lucian Blaga nr. 21, ap. 16, 310023 Arad. The registration is public: you can look the company up by that number in the Romanian trade register, at myportal.onrc.ro. Its founder, Claudio Nicodemo, has spent 30 years in the hair and beauty sector: apprentice hairdresser at fifteen, then the salon, then sales and import across Europe, and in recent years private label, where a product is specified and made. That is the chain cosmetiFULL is built on, and the software is for the people on it: beauty brand owners, cosmetic manufacturers and safety assessors.
Where the regulatory knowledge comes from
The rules come from the official legal texts published on EUR-Lex, and each rule carries one citation: the article it rests on, or the act that amended it. We re-read those sources twice a month, and when a regulation changes, the rule changes with it.
Why the answers hold
Before a release reaches you, the regulatory base it reads is checked against the shared source it comes from, and its coverage of the Annexes is verified entry by entry: a release does not ship if either has drifted. Your first analysis and your hundredth are read against the same rulebook, at the same depth. And every rule lives in one place, so an update reaches every part of the software that uses it, in the same release.
Artificial intelligence
We build the AI systems we sell, so under the EU AI Act we are their provider and the duties that come with that are ours. Where you are talking to a machine, and what the software drafts rather than signs, is set out on the AI transparency page. How your data is structured, and how you take it out, is on the data formats page.
The companies that run the service with us
The three below keep it running with us, each one with what it does and where it is registered. A fourth, Proton, carries our mail. The infrastructure page sets out what all four are certified for, with a link to each company’s own site, so you can check it at the source.
| Cloudflare | Cloudflare, Inc., United States | hosting, database and file storage |
|---|---|---|
| Anthropic | Anthropic, PBC, United States | the models that read and reason |
| Amazon Web Services | Amazon Web Services EMEA SARL, Luxembourg | transactional email only, sent from the Frankfurt region |
Where your data lives
Your reports and the files you upload sit on Cloudflare’s European infrastructure. Your login record, the email and a one-way fingerprint of your password, sits in Cloudflare’s key-value store, which is replicated across its network. The mail the service sends you goes out from Frankfurt. Your label content leaves Europe at one point only, when it is read: it goes to the models in the United States while your answer is produced, and that content is excluded from model training. When one review covers several products, it also stays for the short life of the technical cache that saves re-sending the same text for each of them. The transfer is covered by the European Commission’s standard contractual clauses, the instrument European law provides for exactly this, and you can ask us for a copy. What stays afterwards is the report, together with the artwork and the packaging photos you attached to a declaration, and those go when you delete the declaration. The label text you submitted is read to produce the report and is not kept once it exists, and when you register a quantitative formula on a declaration the software records that the document exists and never receives its content at all.
Security reports reach a person
Write to security@cosmetifull.com. A person reads that mailbox, replies to you, and tells you what came of it.
security@cosmetifull.com