Security & GDPR
Your data. In Germany.
Anyone working with customer data needs to know where it sits and how it's protected. Here you'll find exactly what's guaranteed — and what we can demonstrate on request.
Three fields · up and running in 15 minutes · then the free plan continues automatically
- Servers in Germany
- GDPR-compliant
- Built in Germany
Foundations
What's firmly guaranteed.
Servers in Germany
IssuePilot runs on servers in Germany. Your data and your customers' data never leave the German legal jurisdiction for a US cloud.
GDPR-compliant
Processing follows the GDPR, with data minimisation as our default stance: we collect what's needed to run the service — nothing more.
Encrypted transfer
Traffic between the browser and IssuePilot is encrypted over HTTPS/TLS. Data in transit is protected against eavesdropping.
Encrypted password vault
Credentials are stored in the vault encrypted with AES-256-GCM. An access log records who saw what and when; individual entries can be shared with customers.
Role-based access
Workspaces and teams keep areas cleanly separated. Everyone sees what belongs to their area, rather than everything by default.
Tracking only with consent
Nothing is tracked without your consent. On the marketing website, analytics and marketing services (Google Analytics 4, Microsoft Clarity, Google Ads) only load after you actively opt in — Consent Mode v2, disabled by default. In the app (cockpit.issuepilot.app) and in the widget, no third-party tracking runs at all.
Payments via Stripe
Payment processing is handled by Stripe as the payment provider. Stripe processes card details, not IssuePilot.
Data export anytime
You can access and export your data at any time — you're never locked in.
Evidence & documents
Available in detail on request.
We provide these documents and details on request — just drop us a line.
Data processing agreement (DPA)
We provide a DPA on request. Just drop us a line via the contact page.
List of sub-processors
On request, we'll name the service providers we use (e.g. hosting in Germany, Stripe for payments).
Backups & technical details
Your data is backed up regularly. Details on backup schedule, storage and encryption at rest are available on request.
Questions about privacy, the DPA or security? Get in touch — or read the privacy policy.
When an AI reads along
You decide what leaves — not the model.
Claude and ChatGPT can be connected to your workspace. Because that means data travelling to someone else’s provider, such a key hangs on permissions granted one by one, can be restricted to individual teams and logs every call. Three things are blocked regardless: the password vault, assigning roles, and billing.
Common questions
Questions about privacy and security.
On servers in Germany. IssuePilot is built and operated in Germany, and your data stays within the German legal jurisdiction.
Privacy that fits your customers.
Start on the free plan — servers in Germany, no credit card.
Three fields · No credit card · Cancel monthly
- Servers in Germany
- GDPR-compliant
- Built in Germany
Still got a question? Write it down