Security & data protection
A compliance product that is itself compliant.
We sell governance tooling to DPOs. It would be embarrassing to be sloppy ourselves.
EU-first data handling
- • All data hosted in EU data centres (Frankfurt), encrypted at rest and in transit.
- • Zero trackers on this website; fonts served by EU-based Bunny Fonts (GDPR-safe).
- • Session cookies only — no third-party advertising pixels, ever.
Your register is yours
- • Full export (PDF/CSV) at any time on paid plans.
- • Deletion on request within 30 days — no dark patterns.
- • We never use your register content to train anything. There is nothing to train.
Least-privilege access
- • Auth handled by an isolated Better Auth service with rate limiting and 30-day rotation.
- • Role-based workspaces: owner, admin, member.
- • Internal access is audited and needs a reason you can ask us about.
Deterministic engine, no data leaves
- • Classification runs on your server against a local rule pack — your tool inventory is never sent to a third-party AI.
- • Rule packs are versioned and diffable; you can always see what changed.
Report a vulnerability: [email protected] — see security.txt.