We encrypt it with AES-256 and host it on AWS in Frankfurt. Nothing trains on it.
We store your customers' data in Frankfurt. The DPA lists every vendor that handles it, with its region.
The security measures from our DPA, written out for your security review.
AWS in the EU, with private networking and Cloudflare in front of every public service.
TLS 1.2 or newer for every connection and AES-256 for stored data. Integration tokens get their own AES-256-GCM encryption.
Access follows roles and gets reviewed on a schedule. Only authorized staff can reach production.
Production logs raise alerts. If a breach affects your data, we tell you without undue delay, as the GDPR requires.
Your admins decide who gets access and which pages stay private.
Admins, Members and free Viewers, each with its own permissions.
Sign customers in to your portal with your own login through signed JWTs.
Make a whole portal or single sections private. Search engines skip private pages.
Export your data from Settings. Delete any contact to answer a GDPR erasure request.
The documents your legal team asks for, published in full.
Write to [email protected]. We confirm receipt within 2 business days and aim to fix critical issues within 7.
Read the disclosure policy