Trust
You keep the work. We hold the report, and you can take that with you too.
You are about to put your labels through LabelCheck. The reports it produces sit in your account, on European servers, and they are yours to take with you: ask us in writing whenever you want and we deliver the export within 14 working days, as the data formats page explains. Every point a report raises carries the rule behind it, and the article of law whenever that rule has one, so you can open the official text and read the sentence for yourself.
On this page
Who you are dealing with
cosmetiFULL is operated by Nicodemo & Signa Company Srl, registered in Romania, trade register J02/809/2003, VAT RO15617609, registered office Strada Lucian Blaga nr. 21, ap. 16, 310023 Arad. The registration is public: you can look the company up by that number in the Romanian trade register, at myportal.onrc.ro. Its founder, Claudio Nicodemo, has worked in the hair and beauty sector since 1996: apprentice hairdresser at fifteen, then the salon, then sales and import across Europe, and in recent years private label, where a product is specified and made. That is the chain cosmetiFULL is built on, and the software is for the people on it: beauty brand owners, cosmetic manufacturers and safety assessors.
Where the regulatory knowledge comes from
In LabelCheck, the rules come from the official legal texts, published on EUR-Lex for the European Union and on legislation.gov.uk for Great Britain, and each rule carries one citation: the article it rests on, or the act that amended it. We re-read those sources twice a month, and when a regulation changes, the rule changes with it.
Why the answers hold
Before a LabelCheck release reaches you, the regulatory base it reads is checked against the shared source it comes from, and its coverage of the Annexes is verified entry by entry: a release does not ship if either has drifted. Your first analysis and your hundredth are read against the same rulebook, at the same depth. And every rule lives in one place, so an update reaches every part of the software that uses it, in the same release.
Artificial intelligence
We build the AI systems we sell, so under the EU AI Act we are their provider and the duties that come with that are ours. Where you are talking to a machine, and what the software drafts rather than signs, is set out on the AI transparency page. How your data is structured, and how you take it out, is on the data formats page. How you move to another provider, and what that costs you (nothing), is on the switching page.
The companies that run the service with us
The three below keep it running with us, each one with what it does and where it is registered. A fourth, Proton, carries our mail. The infrastructure page sets out what all four are certified for, with a link to each company’s own site, so you can check it at the source. The full list of who receives which data, and why, is in the cosmetiFULL platform privacy policy.
| Cloudflare | Cloudflare, Inc., United States | hosting, database and file storage |
|---|---|---|
| Anthropic | Anthropic Ireland, Limited, Ireland | the models that read and reason |
| Amazon Web Services | Amazon Web Services EMEA SARL, Luxembourg | transactional email only, sent from the Frankfurt region |
Where your data lives
In LabelCheck, your reports and the files you attach to a feedback note sit on Cloudflare’s European infrastructure. Your login record, the email and a one-way fingerprint of your password, sits in the same database as your reports, and a copy of it is kept in Cloudflare’s key-value store, which is replicated across its network. The mail the service sends you goes out from Frankfurt. Your label content leaves Europe when it is read: while your answer is produced it goes to the model provider, which processes data in the United States and other countries, and that content is excluded from model training. When one review covers several products, it also stays for the short life of the technical cache that saves re-sending the same text for each of them. The transfer is covered by the European Commission’s standard contractual clauses, an instrument EU law provides for this, and you can ask us for a copy. On our side, what stays afterwards is the report, and how long the model provider keeps what it received is set out in the cosmetiFULL platform privacy policy. The files you attach to a readiness check serve that check only and are not kept. You can delete an analysis from your archive at any time, and a saved declaration is erased when you ask us to erase your data, at info@cosmetifull.com, or, after your account is closed, at the end of the retrieval period, which lasts at least 30 days. The label text you submitted is read to produce the report and is not kept once it exists, and when you register a quantitative formula on a declaration the software records that the document exists: if you attach the file, the software receives it for that purpose only, does not pass it to the models and does not keep it. What happens to an ExpertDesk conversation is set out in ExpertDesk’s own privacy policy.
Security reports reach a person
Write to security@cosmetifull.com. A person reads that mailbox, replies to you, and tells you what came of it.
security@cosmetifull.com