Swiss made. EU hosted. GDPR compliant.
Operated under the EU GDPR and the revised Swiss Federal Act on Data Protection. Data processing agreement available on all paid plans.
Brief content and account data live in Frankfurt, Germany. Application, database and analytics all run inside the EU.
Designed, built and operated by kreisvier lab in Basel, Switzerland. Swiss Made Software certified.
TLS 1.2+ with HSTS on every request. AES-256 encryption at rest. Strict security headers enforced at the edge.
We do not sell, rent or share your data with advertisers or data brokers. There is no advertising business model here to tempt us.
Your briefs are never used to train AI models — not ours, not anyone else's. Your commercial information stays yours.
| Provider | Purpose | Data location | Transfer safeguard |
|---|---|---|---|
| MongoDB Atlas | Primary database — brief content and account records | Frankfurt, Germany (EU) | None — EU only |
| Render | Application and API hosting | Frankfurt, Germany (EU) | None — EU only |
| Clerk | Authentication and session management | EU / USA | EU Standard Contractual Clauses |
| Stripe | Payment processing and invoicing | EU / USA | EU Standard Contractual Clauses |
| PostHog | Product analytics (EU instance, no session recording) | Frankfurt, Germany (EU) | None — EU only |
| Resend | Transactional email (invitations, notifications) | EU / USA | EU Standard Contractual Clauses |
| HubSpot | Marketing website analytics and CRM — public pages only, never brief content | EU / USA | EU Standard Contractual Clauses |
| Integration | Purpose | Data location | Transfer safeguard |
|---|---|---|---|
| Asana | Push approved briefs into project execution | EU / USA — EU data residency available on Asana Enterprise+ | EU Standard Contractual Clauses |
| Microsoft 365 / Outlook | Create kickoff calendar events from a brief | EU / per tenant configuration | EU Standard Contractual Clauses |