Trust Center

Customer data and backups reside in AWS Frankfurt (eu-central-1).

Production databases have no direct internet access inside an isolated VPC.

Logical isolation by database schema and JWT tenant claims. Dedicated AI knowledge bases available on request.

Dev, Staging, and Production run in separate AWS accounts with no cross-environment data access.

Staff access uses MFA and least-privilege RBAC. Privileged access is logged in CloudTrail.

Individual named accounts for users and operators. Shared admin accounts are not used.

SSO with external IdPs such as Microsoft Entra ID is available and being rolled out for customers.

All data in transit is protected with TLS 1.2 or higher.

Data at rest is encrypted with AES-256. Keys are managed in AWS KMS and Secrets Manager.

Tenant-scoped versioned audit history with major and minor releases for regulated documentation changes.

Grafana monitors the platform around the clock. GuardDuty, Security Hub, and Dependabot run continuously.

Mandatory 4-eye code review and CI/CD promotion Dev → Staging → Production.

Platform software is validated according to IEC/TR 80002-2 for process software.

Customer data is never used to train or fine-tune models, including when anonymized. Inference runs via AWS Bedrock in Frankfurt, tenant-scoped and ephemeral.

Documented incident response plan. As processor, CertHub notifies customers without delay and within 24 hours of becoming aware of a personal-data breach.

Multi-AZ architecture with 6-hour backup cycles. Contractual availability 99.2% per month. RTO ≤ 24 h, RPO ≤ 6 h. Recovery verified through quarterly restore tests.

After contract end: 30-day export window, production data deleted within 90 days, backups within 180 days.