Trust, security and compliance

The trust page is the full reference: carna.ai/en/trust

• GDPR — applies to EU operations under Carna Technologies Ltd (UK).
• KVKK — applies to Turkish operations under Carna Eğitim Teknolojileri A.Ş.
• COPPA — observed for the kids product.
• SSO and SCIM — SAML, OIDC and SCIM provisioning are available on the Business tier.
• Role-based access — available on the Schools and Business tiers.
• Sub-processors and certifications — listed on the trust page.

Legal documents: privacy policy carna.ai/en/privacy and terms carna.ai/en/terms