CSA STAR Registry
Security, Trust, Assurance, and Risk Registry
Listings for Small Guy B.V.
Small Guy B.V. (Breda, Netherlands) builds CallMerlin, an EU-hosted SaaS AI voice and chat assistant for SMB teams.
CallMerlin combines secure chat, webcall, and phone (PSTN) with PIN-gated access, capability-based permissions, and optional 2FA. Customer data is processed in the EU (Google Cloud / Firestore). Privacy policy, DPA, and security contact are published at callmerlin.app.
This STAR Registry entry documents our Level 1 self-assessment for the CallMerlin cloud service.
CallMerlin
CallMerlin is an EU-hosted SaaS AI voice and chat assistant for SMB teams (chat, webcall, and phone). Access is PIN-gated with ca...
Listed Since: 2026-07-17
AI CAIQ
Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).
CAIQ Lite
The CCM-Lite is a simplified version of the Cloud Controls Matrix (CCM) v4.1. It includes 96 carefully chosen controls, a subset of the original 207. These controls are essential for any organization's cloud security, regardless of size or budget.