Skip to content
    Early accessGeneral release planned for 2027Request access
    Trust Center

    Traceable and verifiable

    This overview describes available controls and links to technical details, contract documents and known assurance limits.

    View DPA

    Data stored in Frankfurt · GDPR · · Hash-chain v2

    Security & Compliance

    Included in every plan

    The hash-chain audit trail, role permissions and the DPA are included in every plan. Data is stored in Frankfurt.

    AVV / DPA
    ART. 28 GDPR
    Frankfurt
    DATA STORAGE (AWS)
    E-Sign
    WITH PASSWORD CONFIRMATION
    § 16 GefStoffV
    HAZARDOUS SUBSTANCES REGISTER (DE)
    SHA-256
    CHAINED AUDIT TRAIL

    Data protection (GDPR)

    Data storage in Frankfurt, named sub-processors and documented export and deletion paths.

    Read privacy policy

    Audit trail & signatures

    The audit trail is chained with SHA-256 hashes, so later changes to recorded entries are detectable. Electronic signatures with password confirmation.

    View compliance module

    Data Processing Agreement

    Binding German version under GDPR Art. 28, including TOMs and the subprocessor list.

    Read DPA

    Status & availability

    Live status, planned maintenance and incident history are public.

    Open status page

    Imprint & legal

    Responsible entity, register details, terms and DPA — all linked from the footer.

    Read imprint

    Sub-processors

    Providers named in DPA Annex 3, their services, processing locations and the contractual change procedure.

    View provider list

    Data return and exit

    Your data stays your data

    Administrators can initiate the available organisation export. Deadlines and retention are governed by the contract and DPA.

    Self-service export

    Admins start a full export as a ZIP from the settings: tables as CSV plus the matching files from storage, with a data dictionary.

    Open formats

    CSV and the original files as they were uploaded. No proprietary archive format, no decryption tool required.

    Deletion on request

    Account deletion under GDPR Art. 17 via a documented deletion path; audit-trail records remain as events for integrity reasons.

    Contract terms

    Deadlines, retention and data provision are governed by the contract and DPA.