Sovereignty
Security and compliance — built in, not bolted on
Every application carries security and the GDPR obligations from the start: encryption, consent management, imprint & privacy and data subject rights — as working code in the product, hosted in Germany.
§
GDPR in the product
Consent with active opt-in and a log, generated legal texts, self-service for access and deletion — Art. 7, 13, 15–22 covered.
⬡
Secure from the ground up
Encrypted transport (SSL/TLS) and hashed passwords, fine-grained roles and permissions, an isolated environment per app.
⚑
Transparent & auditable
Hosted in Germany, disclosed sub-processors, a DPA on request — plus a complete audit trail, ready for the EU AI Act. Details on the trust page.
What every application ships with
- ✓Consent management. Cookie banner with active opt-in per § 25 TDDDG; every consent is logged with timestamp and scope.
- ✓Legal texts from master data. Imprint (§ 5 DDG) and privacy policy (Art. 13 GDPR) are generated from the operator's details.
- ✓Data subject rights as self-service. Access and data export (Art. 15/20) and deletion requests (Art. 17) right in the account.
- ✓Audit trail. Every agent decision is logged and requires sign-off — traceable instead of a black box.
- ✓Encryption & access control. Transport via SSL/TLS, hashed passwords, role-based permissions and an isolated environment per app.
- ✓Hosted in Germany, services disclosed. Application data at Hetzner (DE), database with no public IP; external services (AI, email) are disclosed with provider, location and purpose — see the trust page.
- ✓Code export in progress. You keep the rights to your code. Self-service export from your own repository is in progress — until then we export on request.
Your idea deserves its own software.
Describe your project — within minutes there's a first version you can click through.