Technical and organizational measures (TOMs)
These are the technical and organizational measures under Article 32 GDPR.
The application runs in Frankfurt and the database is hosted in the EU. Transmission is encrypted with TLS, and data at rest is encrypted with AES-256. Stored documents are encrypted in addition.
Backups are taken daily.
As of 16.10.2026
Download PDF