Floriti was built for privacy-sensitive registers — so security is not a feature, it is the architecture. Here is exactly how we protect your data, with no marketing fog.
Most SaaS products put all customers into one shared database and separate them with software rules. Floriti does not.
Every customer gets their own application instance and their own PostgreSQL database. Your data is physically separated from other customers — a bug or breach in one tenant cannot leak into another.
All connections use TLS (HTTPS) with automatically renewed certificates. Direct database access for reporting is TLS-encrypted as well.
The reporting database port is protected by an IP allowlist that you control yourself from your admin area — closed by default.
Granular role-based access (admins, editors, approvers, readers), user groups, and optional single sign-on via OpenID Connect with your identity provider.
Every change is logged with per-field edit history — who changed what, and when. Approval workflows add a tamper-resistant four-eyes principle.
Passwords are stored only as salted hashes. Sessions use signed tokens with per-instance secrets — every customer instance has its own keys.
Floriti runs on servers in Falkenstein, Germany, operated by Hetzner Online GmbH — in data centers certified to ISO 27001. Data stays in the EU.
Our infrastructure provider Hetzner is certified to ISO 27001 (information security management). Floriti itself is not yet ISO-certified — we say that openly. Our processes are built to be certification-ready as we grow.
Application, databases and daily backups are located in Germany. Encrypted backup copies are additionally stored in Finland and France — all within the EU. Transactional e-mail is sent via Brevo (EU-based provider).
Every customer database is backed up automatically every night, with 14 days of retention. In addition, an encrypted copy is stored at two independent EU locations with two different providers, protected against deletion and checked weekly by an automatic test restore. Restores are performed on request as part of support.
AI features are optional, can be switched off completely at any time, and are designed so your documents stay under your control.
The AI knowledge base (semantic search / RAG) runs on a self-hosted embedding model on our own servers. Your uploaded documents are never sent to third-party AI services for indexing.
In paid plans, AI analysis stays deactivated until one of your admins deliberately enables it — a documented opt-in. In demo workspaces it is active for trying things out and can be switched off completely at any time. You can also bring your own API key or EU/on-premise endpoint.
While AI analysis is enabled, the text you submit is processed by Anthropic (Claude) via API. Anthropic does not use API data to train its models by default. This is documented in our data processing agreement.
The paperwork your data protection officer will ask for — ready when you are.
Our data processing agreement is based on the European Commission's Standard Contractual Clauses (Art. 28(7) GDPR) and includes the technical and organisational measures (TOM, Art. 32 GDPR) — download it below under “Contracts & SLA”.
We keep the list deliberately short: Hetzner (hosting, Germany, plus encrypted backup copies in Finland), mailbox.org (business e-mail, Germany), Scaleway (encrypted backup copies, France), Brevo (e-mail, EU) — and Anthropic (AI, only while AI analysis is enabled). No advertising or analytics processors.
Our Managing Director, Oliver Fuchs, personally oversees data protection — a TÜV-certified data protection officer and data protection auditor, and Certified Information Privacy Professional/Europe (CIPP/E).
Full data export (Excel/CSV/ZIP, including attachments) is built in — no lock-in. On contract end, your instance and database are deleted completely on request.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting, infrastructure | Germany (Falkenstein) |
| Hetzner Online GmbH (Storage Box) | Encrypted backup copies | EU (Finland, Helsinki) |
| Scaleway SAS | Encrypted backup copies (object storage) | EU (France, Paris) |
| Heinlein Hosting GmbH (mailbox.org) | Business e-mail (support, contact) | Germany (Berlin) |
| Brevo (Sendinblue SAS) | Transactional e-mail | EU (France) |
| Anthropic PBC | AI analysis — only if enabled by you | USA (opt-in only) |
Clear commitments instead of vague promises — our contract documents in one place.
Our Service Level Agreement guarantees 99.5 % monthly availability for paid plans — measured automatically, with service credits if we miss it. Maintenance windows are announced at least 48 hours in advance.
Support requests are handled every day of the week — including weekends. Critical incidents (instance unreachable) receive a qualified response within 4 hours during service hours.
Clear B2B terms with a 30-day money-back guarantee on paid plans, a fair-use policy for AI features and storage, and a guaranteed data export period at the end of the contract.
Plans, limits and included quotas are documented transparently in a service description — the same numbers you see on the pricing page.
Information pursuant to Art. 28 of Regulation (EU) 2023/2854 (Data Act): which law our infrastructure is subject to — and how we protect your data against access by authorities outside the EU.
| Service | Provider / infrastructure | Jurisdiction |
|---|---|---|
| Floriti platform (all customer data) | Tasker & Fox GmbH, Munich · servers of Hetzner Online GmbH, data centre Falkenstein | Germany / EU |
| Encrypted backup copy (location 2) | Hetzner Online GmbH, Gunzenhausen · Storage Box, data centre Helsinki | Germany / EU (storage location: Finland) |
| Encrypted backup copy (location 3) | Scaleway SAS, Paris · Object Storage, Paris region | France / EU |
| Business e-mail (support) | Heinlein Hosting GmbH (mailbox.org), Berlin | Germany / EU |
| Transactional e-mail | Sendinblue SAS (Brevo), Paris | France / EU |
| AI analysis — only if activated by you | Anthropic PBC, San Francisco | USA |
The platform and all customer data — databases, attachments, backups and the AI knowledge base index — are located on servers in Germany. In addition, an encrypted backup copy is kept at two independent locations in Finland and France (EU); it is encrypted on our server before upload, and the storage providers have no access to the key. Each customer has its own instance and database; all connections are TLS-encrypted. AI functions are off for paid plans until you activate them, and can be routed to your own EU or on-premise endpoint instead.
Administrative access to the servers is reserved to the provider and only via encrypted SSH. We do not replicate data outside the EU (apart from texts you submit to the AI analysis once activated), and our hosting provider Hetzner is a German company without a parent company outside the EU. Scaleway, which holds our second encrypted backup copy, is a French company and part of the French Iliad group. As the decryption key is kept offline by our management, a request addressed to a storage provider could only ever obtain encrypted data.
We only comply with requests from authorities outside the EU if they are based on an international agreement such as a mutual legal assistance treaty. We examine every request, challenge unlawful ones, disclose only the minimum required — and inform you beforehand unless this is legally prohibited. Our sub-processors are bound by data processing agreements; Anthropic additionally by the EU Standard Contractual Clauses, including their rules on government access requests.
Security pages love vague promises. We prefer verifiable facts — and we tell you what we are not (yet).