Do we get a data processing agreement (DPA)?

Yes, we provide a DPA on request. Simply get in touch via the contact page.

How is the password vault protected?

Credentials are stored in the vault encrypted with AES-256-GCM. An access log records who accessed what and when; you can share individual entries with customers as needed.

How are payments processed?

Through Stripe as the payment provider. Stripe processes card details — IssuePilot doesn't store any card data.

Can we export or have our data deleted?

You can export your data at any time. We'll arrange deletion on request; the details are governed by the privacy policy.

Security & GDPR

Your data. In Germany.

Q: Is IssuePilot GDPR-compliant?

Yes. Processing follows the GDPR, with data minimisation as standard. The app itself has no third-party tracking; on the marketing website, analytics and marketing services (Google Analytics 4, Microsoft Clarity, Google Ads) only load after you actively opt in (Consent Mode v2, disabled by default). Additional data in the widget such as email or customer number is optional.

Anyone working with customer data needs to know where it sits and how it's protected. Here you'll find exactly what's guaranteed — and what we can demonstrate on request.

Start free Read the privacy policy

No credit card · 30 days of Pro free · up and running in 15 minutes

Servers in Germany
GDPR-compliant
Built in Germany

Foundations

What's firmly guaranteed.

Servers in Germany

IssuePilot runs on servers in Germany. Your data and your customers' data never leave the German legal jurisdiction for a US cloud.

GDPR-compliant

Processing follows the GDPR, with data minimisation as our default stance: we collect what's needed to run the service — nothing more.

Encrypted transfer

Traffic between the browser and IssuePilot is encrypted over HTTPS/TLS. Data in transit is protected against eavesdropping.

Encrypted password vault

Credentials are stored in the vault encrypted with AES-256-GCM. An access log records who saw what and when; individual entries can be shared with customers.

Role-based access

Workspaces and teams keep areas cleanly separated. Everyone sees what belongs to their area, rather than everything by default.

Tracking only with consent

Nothing is tracked without your consent. On the marketing website, analytics and marketing services (Google Analytics 4, Microsoft Clarity, Google Ads) only load after you actively opt in — Consent Mode v2, disabled by default. In the app (cockpit.issuepilot.app) and in the widget, no third-party tracking runs at all.

Payments via Stripe

Payment processing is handled by Stripe as the payment provider. Stripe processes card details, not IssuePilot.

Data export anytime

You can access and export your data at any time — you're never locked in.

Evidence & documents

Available in detail on request.

We provide these documents and details on request — just drop us a line.

Data processing agreement (DPA)

We provide a DPA on request. Just drop us a line via the contact page.

List of sub-processors

On request, we'll name the service providers we use (e.g. hosting in Germany, Stripe for payments).

Backups & technical details

Your data is backed up regularly. Details on backup schedule, storage and encryption at rest are available on request.

Questions about privacy, the DPA or security? Get in touch — or read the privacy policy.

Common questions

Questions about privacy and security.

On servers in Germany. IssuePilot is built and operated in Germany, and your data stays within the German legal jurisdiction.

Privacy that fits your customers.

Start on the free plan — servers in Germany, no credit card.

Start free See the product

No credit card required · Up and running in 15 minutes · Cancel anytime

Servers in Germany
GDPR-compliant
Built in Germany

Prefer to talk first? Request a demo