01Compliance at a glance
| Topic | Status | Reference |
|---|---|---|
| GDPR (EU/UK) | Compliant via SCCs & on-device-first | Privacy Policy |
| CCPA / CPRA (California) | Compliant | Your rights |
| SOC 2 Type I | Audit in progress · target Q3 2026 | — |
| ISO 27001 | Roadmap · 2027 | — |
| CE marking (EU) | Self-declaration in progress | EU Machinery Reg. |
| FCC Part 15 (USA) | Class A pending | FCC ID applied |
| ISO 10218 / ISO/TS 15066 | Conformance-evaluation underway | Industrial robots |
| GlobalG.A.P. | Data-export support in console | v5.4 schema |
02Data protection
NeuraPick is registered as a data controller for marketing and customer-account information. For customer agronomy and telemetry data, NeuraPick acts as a processor, with a written Data Processing Agreement (DPA) included in every Pilot Agreement. The DPA covers Standard Contractual Clauses for EU/UK transfers, sub-processor disclosure, breach-notification SLA (72 hours), and a defined process for data-subject requests.
For details on what we collect, how long we keep it, and your rights, see the Privacy Policy.
03Local-first computing
The single biggest compliance choice in our design is local-first compute. YOLO inference, depth fusion, motion planning, and fault detection all run on the NVIDIA Jetson module mounted on the robot. The robot stays useful when the customer’s Wi-Fi goes down. And the volume of data that ever crosses the property line is intentionally small — counts, status, alerts — not raw frames.
Vision frames are uploaded off-site only when the customer enables it (typically for an open service ticket or a model-improvement program), and the frames are subject to the retention schedule in our Privacy Policy.
04Machinery & operator safety
Every EVE-01 ships with redundant safety controls:
- Hardwired e-stop on the chassis — cuts motor power independent of the compute stack;
- ELRS manual override via a RadioMaster TX16S Mark II, with a tri-state switch that takes precedence over autonomous mission control;
- Speed governance: 0.1 m/s harvest mode, 80 m/min transit, with software interlocks that prevent transit speeds when arms are extended;
- Conformal sensing: dual stereo cameras plus chassis bumpers gate motion when human presence is detected within the configured exclusion zone.
Operator training is mandatory before unsupervised use. NeuraPick’s in-person training covers safe approach, e-stop verification, ELRS handover, and post-incident reporting. We renew certification annually.
05Hardware certifications
EVE-01 is built around components with established certifications (NVIDIA Jetson, OAK 4D cameras, RadioMaster transmitters). System-level certifications are in progress — specifically:
- CE Marking under the EU Machinery Regulation 2023/1230, self-declaration with technical-file dossier on file at our EU representative;
- FCC Part 15 Class A for the US market, application filed;
- ISO 10218 (industrial robot safety) and ISO/TS 15066 (collaborative-robot safety) conformance evaluation underway with an accredited test house.
Customers can request the current state of certification under NDA before signing a pilot agreement.
06Agronomy & food safety
EVE-01’s end-effector design (cable-driven jaw + calyx blade, food-grade stainless contact surfaces) is intended for direct contact with produce destined for retail. The end-effector is cleanable to greenhouse food-safety standards with no chemical contamination from lubricants. We provide a written cleaning and inspection schedule with every unit.
Per-plant detections and treatment events are logged in the customer console for full traceability. The console exports GlobalG.A.P. v5.4-compatible data and is on track to support GFSI-recognized schemes (BRCGS, FSSC 22000) on customer request.
07Trade & export controls
EVE-01 hardware contains NVIDIA Jetson modules that may be subject to US Export Administration Regulations (EAR). NeuraPick screens all orders against the OFAC Specially Designated Nationals list, the Bureau of Industry and Security Entity List, and EU/UK sanctions lists before fulfillment. We do not ship to embargoed jurisdictions. Customers must comply with all applicable re-export rules.
08Anti-bribery & ethics
NeuraPick prohibits bribery, kickbacks, and improper payments in any form, in any jurisdiction. The company complies with the US Foreign Corrupt Practices Act and the UK Bribery Act. Suppliers and partners are expected to meet the same standard; violations are grounds for immediate contract termination.
09Sub-processors
The current list of sub-processors that may receive personal data on our behalf:
| Vendor | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, telemetry storage | USA (us-east-1) |
| Cloudflare | Edge, DNS, DDoS protection | Global |
| Postmark | Transactional email | USA |
| Sentry | Console error tracking | USA |
| Stripe | Customer billing | USA |
| Google Fonts | Web typography | Global CDN |
| Google reCAPTCHA Enterprise | Demo-form anti-spam (fraud-risk scoring on submission) | USA / Global |
We give customers 30 days’ advance notice of any addition or substitution that affects personal data.
10Reporting & whistleblowing
To report a safety incident, a suspected security vulnerability, or an ethics concern, write to safety@neurapickrobotics.com (incidents), security@neurapickrobotics.com (vulnerabilities), or ethics@neurapickrobotics.com (anonymous channel monitored by the board).
Reports are acknowledged within two business days. We do not retaliate against good-faith reporters.
11Contact
General compliance questions: compliance@neurapickrobotics.com.
5830 E 2ND ST, STE 7000 #29017
Casper, WY 82609
United States