Security & Data Protection

• Hosted in ISO/IEC 27001:2022 certified European data centers operated by Hetzner Online GmbH (Germany).
• All production infrastructure located within the European Union.
• Strict physical access controls and monitored facilities.
• Redundant power and networking infrastructure.

• All customer data stored within the European Union.
• EU-first hosting strategy aligned with GDPR technical and organizational measures (TOMs).

• All traffic encrypted in transit using modern TLS protocols.
• TLS 1.3 supported.
• TLS 1.2 supported for compatibility.
• TLS 1.1, TLS 1.0 and SSL disabled.
• TLS enforced at the edge via Cloudflare.
• Configuration achieves A+ rating on SSL testing platforms.

• Cloudflare used for HTTPS termination and edge security.
• Traffic filtering and DDoS mitigation.
• Global content delivery optimization.

• We use a redundant, replicated database architecture to ensure availability and data resilience.
• Private internal networking between infrastructure components.
• Firewall-restricted database access.
• Automated backups.
• Backups are protected with strict access controls.
• Monitoring and alerting for system health.

• Role-Based Access Control (RBAC).
• Tenant data separation.
• Least-privilege internal access policies.
• Restricted administrative access.

• Application-level audit logging.
• Infrastructure monitoring.
• Administrative action tracking.
• Automated alerting for abnormal activity.

• Regular OS updates.
• Backend dependency updates.
• Timely security patch application.
• Ongoing infrastructure configuration review.

• Essential cookies required for core platform functionality.
• Analytical cookies used to improve performance and usability (where applicable).

Transparent cookie disclosures in our Cookie Policy.

• User control options for non-essential cookies via our consent mechanism.

Security issues can be reported to [email protected].

Responsible disclosure reviewed promptly.