Trust & Security

Swiss made. EU hosted. GDPR compliant.

GDPR & revFADP

Operated under the EU GDPR and the revised Swiss Federal Act on Data Protection. Data processing agreement available on all paid plans.

EU data residency

Brief content and account data stay in the EU. Database and application run in Frankfurt, Germany; sign-in, payments, email and product analytics use EU-hosted services.

Swiss made

Designed, built and operated by kreisvier lab in Basel, Switzerland. Swiss Made Software certified.

Encrypted in transit and at rest

TLS 1.2+ with HSTS on every request. AES-256 encryption at rest. Strict security headers enforced at the edge.

No data selling. Ever.

We do not sell, rent or share your data with advertisers or data brokers. There is no advertising business model here to tempt us.

No AI training on your content

Your briefs are never used to train AI models — not ours, not anyone else's. Your commercial information stays yours.

Sub-processors

ProviderPurposeData locationTransfer safeguard
MongoDB AtlasPrimary database — brief content and account recordsFrankfurt, Germany (EU)None — EU only
RenderApplication and API hostingFrankfurt, Germany (EU)None — EU only
ClerkAuthentication and session managementEUNone — EU only
StripePayment processing and invoicingEUNone — EU only
PostHogProduct analytics (EU instance, no session recording)Frankfurt, Germany (EU)None — EU only
ResendEmail — account and collaboration notifications, and release notes for subscribersDublin, Ireland (EU)None — EU only

Optional integrations

IntegrationPurposeData locationTransfer safeguard
AsanaPush approved briefs into project executionEU / USA — EU data residency available on Asana Enterprise+EU Standard Contractual Clauses
Microsoft 365 / OutlookCreate kickoff calendar events from a briefEU / per tenant configurationEU Standard Contractual Clauses