Security Center

Good to know

• Hetzner, the hosting provider for SaaS deployments, is ISO/IEC 27001 certified.

Deployment models

• SaaS — Data & More hosts the platform on dedicated bare-metal servers at Hetzner in Falkenstein (Germany) and Helsinki (Finland).
• On-premise — the platform runs inside your own infrastructure.
• Your data center — the platform runs on hardware in a data center you control.

Data residency

• No multi-tenant public cloud: SaaS deployments run on dedicated physical servers.
• All processing takes place within the EU/EEA. The data processing agreement contractually bars transfers outside the EU/EEA.
• Staff outside the EU/EEA never access customer data.
• Hetzner data centers use video-monitored perimeters, electronic access control, and logged entry.

How the platform handles data

• Reads data at the source — Microsoft 365 via Microsoft Graph, on-premise Exchange, SharePoint, file shares, and Slack. No data migration.
• Data Minimization Manager applies your retention and deletion policies. Nothing is deleted silently: every deletion requires explicit human approval in a validation workflow.
• Data Subject Manager supports data subject access requests (DSARs), including export of results.
• An immutable audit log records every deletion.

• Single sign-on (SSO) through Microsoft Entra ID or Windows Active Directory, using OAuth 2.0 / OpenID Connect.
• Multi-factor authentication (MFA) is mandatory for all administrators and for high-risk systems.
• Role-based access control with four default roles: Administrator, DPO, Project Manager, and End-User.
• Password policy follows NIST guidance: minimum 12 characters, no forced rotation when MFA is active.
• No shared accounts. Access reviews run quarterly.
• Developers have no access to live customer environments.

Why each package is needed

• DEMO — used for proofs of concept and trials. Microsoft Graph is limited to read scopes (Directory.Read.All, User.Read.All, Mail.Read, Files.Read.All) plus Mail.Send for reports. Write and delete scopes are omitted on purpose.
• Production — Data Minimization Manager and Data Subject Manager need write scopes (Mail.ReadWrite, Files.ReadWrite.All, SharePoint Sites.ReadWrite.All / Sites.FullControl.All, Teams read, mailbox settings, and MIP label read) so approved retention, deletion, and labeling can run. Nothing is deleted without explicit human approval.
• Production + DLP — adds Copilot read (AiEnterpriseInteraction.Read.All), Teams app install, audit-log query, and Exchange ManageAsApp so DLP can watch content as it is shared and alert or block in real time. Only customers who enable DLP consent to this package.

Testing

• Penetration testing is ongoing. An independent third party also runs an external penetration test four times a year. All findings are remediated.
• Continuous vulnerability management, with daily checks for critical updates.

Secure development

• Secure software development lifecycle (SSDLC) with Security and Privacy by Design.
• Separated development, staging, and production environments.
• No production personal data in development or test environments.
• Two-person code review before changes ship.

• A documented incident-response process covers severity triage, containment, and postmortem analysis.
• Employees report suspected incidents immediately through a mandatory internal reporting duty.

Data exit

• Workspace deletion removes all customer data from the platform.
• Backups expire within 30 days.
• The DPA commits Data & More to erasure within 30 days of contract end.

Components

• SpaCy — named-entity recognition (NER) for detecting personal data in text.
• YOLOv3 — image recognition.
• Tesseract — optical character recognition (OCR).
• A chat-based chart builder for dashboard graphs.

Optional capabilities

• Optional MCP connection via API key — no access to personal data.
• Optional local LLM — AI analysis that explains classification results.