GDPR-compliant
Project data is hosted in Germany. Operational subprocessors (e.g. email delivery, AI processing) are engaged under data processing agreements with appropriate safeguards – see our Trust Center.
Data Security
We use state-of-the-art encryption and security standards to protect your data:
- SSL/TLS encryption (HTTPS) for all connections
- AES-256-GCM encryption for stored integration credentials
- Automated security testing of the app and interfaces
- Automatic security updates and patches
- Rate limiting for sign-in, API and AI features
- Firewall with minimal open ports, server access by SSH key only, brute-force protection
Hosting in Germany
All PathHub AI servers are located in data centers in Germany and are therefore subject to strict European data protection legislation.
We work exclusively with German hosting providers that are ISO 27001 certified and meet high security standards.
- Data centers in Frankfurt and Berlin
- 24/7 monitoring and physical access control
- Redundant power supply and climate control
- Daily automatic backups with 30-day retention
Access Control & Authentication
PathHub AI implements strict access controls to ensure that only authorized individuals can access data:
- Role-based permissions (owner, editor, viewer)
- Passwords hashed with bcrypt, minimum length 8 characters
- Sessions end after 2 hours, or after 30 days with “stay signed in”
- Protection against password guessing by limiting failed sign-in attempts
- Logging of sign-in attempts and API access
- Two-factor authentication in preparation, IP restrictions for Enterprise on request
Data Processing & AI Security
AI processing is carried out with the highest security standards:
No Training with Customer Data
Your project data is never used to train public AI models.
Isolated Data
Data from different customers is strictly separated from each other.
Deletion on Request
Data is immediately deleted when you delete your account.
GDPR Checklists
Automatic detection of compliance requirements.
Compliance & Certifications
PathHub AI meets all relevant compliance requirements:
- GDPR – GDPR-compliant processing, data processing agreement for business customers
- BDSG – German Federal Data Protection Act compliance
- TOMs under Art. 32 GDPR – technical and organisational measures documented, available on request
- ISO 27001 – hosting in an ISO 27001-certified data center in Germany
Report Security Incidents
If you discover a security vulnerability or a potential security incident, please inform us immediately.
Security Email: security@pathhub.ai
We respond to security reports within 24 hours and keep you informed about the status of the investigation.