Your data, your infrastructure
Customer, contract and transaction data is processed and stored exclusively in your own environment, in the region you choose. Meridian does not host it, copy it or have access to it.
Security & trust
Your customer data stays 100% with you.
Meridian Studio separates designing from running. We help you build and release; your own environment runs the business and holds every customer record. That boundary is not a setting — it is how the platform is built.
Meridian Studio
Design & release
- Products, pricing & rules
- Journeys, documents & brand
- Review, approval & signing
Signed release
Configuration only
Your environment
Run & store
- Customers, contracts & accounts
- Applications & submissions
- Acceptance and production
Customer data never flows back. There is no route from Meridian Studio into your production data.
Security by design
Principles we never compromise on.
Signed, immutable releases
Only reviewed and approved configuration becomes a release. Each release is signed and verified before your environment accepts it.
You decide what goes live
Releases arrive in your acceptance environment first. Promotion to production is an action your organisation takes — never Meridian.
No production test data
Acceptance environments start empty and never receive copies of production data. Testing never becomes a privacy risk.
Least privilege, everywhere
Role-based permissions in every layer, unique credentials per customer and strict separation between design and run-time.
European by default
Meridian Studio is operated in the EU. Your own runtime runs wherever your governance requires.
Compliance & governance
Ready for your regulator, your auditor and your DPO.
Meridian Studio is built for regulated industries. The controls your oversight functions expect are part of the everyday workflow — not a separate project.
GDPR-ready architecture
Personal data stays under your legal basis, your retention and your processors.
Audit trail
Every release is versioned and attributable: who changed what, who approved it, and when it went live.
Segregation of duties
Designing, approving, releasing and promoting are separate rights you assign.
Retention control
Retention periods are configured and enforced in your own environment.
Business continuity
Your production keeps serving customers on the last verified release, even if Meridian Studio is unavailable.
Security reviews welcome
We support your due diligence with architecture documentation and security questionnaires.
Legal
Talk to us → Contracts that match the architecture.
Licence terms, data processing agreements and our list of subprocessors are part of every customer agreement. Because your customer data stays with you, the processing we perform is limited to the configuration and content your teams create in Meridian Studio.
Put us through your security review.
We welcome the hard questions. Our team will walk your architects, security officers and DPO through every boundary.