Security & data protection

Clear answers on who sees your data, how access is protected and where your data is stored.

Who sees which data?

Each company sees only its own data. Roles (administrator, manager, staff, read-only) define who may see and change what. Tenants and owners see in the portal only what has been released to them.

How is access protected?

Sign-in with password plus optional two-factor code or passkey. Repeated failed attempts are slowed down; you can view and end active sessions at any time. New users join by invitation only.

Can I trace who changed what?

Yes. Important changes – for example to postings, roles and access – are logged. The posting journal is protected by an integrity chain against later alteration.

Where is my data stored?

Data centres in Germany (Falkenstein; encrypted backups at a second site in Nuremberg), operated by Hetzner Online GmbH. Further service providers are listed in our privacy policy.

How does CausaX support the GDPR?

A privacy console bundles access and erasure requests with deadlines. Consents can be granted and withdrawn, and you can export your data in full.

What happens if data is lost?

The database is backed up automatically every day. Backups are stored encrypted at a second site in Nuremberg; the restore procedure is documented.

What about AI features?

AI features are labelled and run only when you request them. The necessary content is then sent to our AI provider Anthropic (USA).

Full privacy details

Our privacy policy describes all processing and service providers.