Security & Data Protection

All AI Technikakte data is stored and processed on servers in Nuremberg, Germany (Hetzner Online GmbH, German data center). No data is stored outside the EU. A data processing agreement pursuant to Art. 28 GDPR is in place with our hosting provider.

All connections to the customer portal and website are HTTPS-only – unencrypted requests are redirected automatically. Transport is secured via TLS with modern cipher suites; certificates renew automatically.

Backups of your data are encrypted (AES-based encryption with strong key derivation) before being stored. Without the corresponding key, a backup cannot be read.

Your documents and queries are never used to train AI models – neither by us nor by our AI provider. A data processing agreement is in place with the AI provider; data sharing for training purposes is contractually and technically disabled. On request, we will offer fully self-hosted AI models on German servers in the future.

Each customer company is strictly separated from others within the portal. A fine-grained role model (from read-only access through maintenance and shift management to company administration) ensures employees can only see and change what their role requires.

Security-relevant events are logged. For documents, AI Technikakte additionally keeps a dedicated, long-retention document log: uploads, views, downloads, replacements, approvals and deletions remain traceable at any time – a building block for your audit readiness.

Changes to user accounts (email address, password) require confirmation via one-time code. The affected person is automatically informed by email about every account change. Binding password requirements apply; login attempts are rate-limited.

We operate in line with the EU General Data Protection Regulation: data processing agreements with all relevant providers, a transparent privacy policy, short retention periods for access logs (30 days), and documented technical and organisational measures.