Trust Center

Self-disclosure with data — instead of a purchased seal.

We ask our customers for evidence, not claims. So we start with ourselves. Legal status checked on 01/09/2026.

Server location

Hosting

Falkenstein, DE

Platform and database entirely in Germany — no US cloud.

Backups

Hosting

Double, daily

Server snapshots plus database backups, retained for 14 days (Art. 32 GDPR).

Encryption

Hosting

TLS, everywhere

Every connection is transport-encrypted; certificates renew automatically.

Attack surface

Hosting

Minimal

Firewall reduced to what's necessary, security updates applied automatically.

Registration

Access

Invitation only

No open sign-up — every account is intentional and attributable.

Access

MFA (TOTP)

Two-factor for platform accounts — and for our own operator access.

Permissions

Access

Role-based

Employees see and confirm, owners control.

AI access to your data

None

All generators run deterministically on our own servers — your data trains nothing.

Development

AI-assisted, without customer data

We build with Anthropic Claude — customer data never flows into it.

Labelling

Art. 50 AI Act

We label AI-generated marketing content — the same duty our product walks you through.

Working principle

Compliance

Law first

Legal statements are built from the statute text and carry a source citation with its version.

Our own mistakes

Compliance

Corrected publicly

Every review lands in the change log — most recently Sections 30/38 BSIG.

Unproven citations

Compliance

Release blocked

If we can't prove something against the primary text, we'd rather hold our release.

Self-application · EU AI Act

Completed on 11/08/2026

We passed our own product — here is the proof.

The EU AI Act walkthrough, completed by our own management with exactly the package you can buy — no special view, no polished numbers. These figures come live from the same database from which customers get their own evidence package.

AI inventory

3 systems

ChatGPT, Claude, GitHub Copilot — honestly small, we don't use more.

Usage policy

Version 1

Generated from the inventory — Art. 4 AI Act, as amended by Regulation (EU) 2026/1744.

Training rate

100%

8 certificates in this tenant — 1 of them completed personally by the management.

Labelling

Disclosure active

Decision documented under Art. 50(4) AI Act — we disclose AI content that could be mistaken for genuine.

Management's certificates

AI Competence under Art. 4 EU AI Act · CV-KI-KOMPETENZ-TEAM-2QZCWR

Our own run-through found four bugs in our product — all four are fixed. That's exactly why we do this: nobody should have to buy a tool the maker doesn't use itself.

Every framework at a glance

Self-disclosure from our own running software — the same tables from which customers get their evidence package. Not a certificate: ISO certificates are only issued by an accredited body.

Your security foundation (ISMS)

8 of 11 requirements met

As of 13/08/2026 · legal status checked on 01/09/2026

AI Act (EU AI Act)

9 of 9 requirements met