Trust center
Security & trust
How Postgate AI handles your data: architecture, data protection and operations - transparent and verifiable.
Architecture & access
- Minimal data flowAccess only when your AI assistant performs a specific action. The AI provider is connected via your own account.
- AI service during the trialOnly during the free trial period, and only until you add your own account, do we supply an AI service for the AI assistant in the Outlook add-in. The provider is Scaleway SAS, with processing in the EU, currently in Paris according to Scaleway. Scaleway does not store requests or responses after processing and does not use them to train AI models. Only in the event of misuse or a service disruption may Scaleway temporarily store the affected requests to find the cause, for two weeks at most according to Scaleway. Once you use your own account, nothing goes to Scaleway.
- Security model in detailDelegated permissions per user, caching off by default, an encrypted credential vault: the full security model.
Data protection & compliance
- Data processing agreement (DPA)A DPA under Art. 28 GDPR is a mandatory part of registration, personalised with your company name, available in the portal anytime.
- Transparent subprocessorsAll engaged subprocessors are publicly listed; changes are announced in advance.
- Hosting in GermanyOperation and encrypted storage exclusively in German data centres. The AI service during the trial is the exception (see above). With the self-hosted license, in your own environment.
- GDPR self-serviceData export and full deletion of the organisation can be triggered in the portal anytime.
Access & account security
- Two-factor & SSOTwo-factor sign-in by e-mail; organisations can enforce Microsoft SSO (disable password login).
- Roles & audit logFine-grained roles (admin, billing admin) and an activity log per organisation.
- HardeningBot protection, rate limiting and login lockout protect the portal; encrypted connections throughout (TLS).
Operations & certification
- Backups & recoveryRegular backups; recovery via a reproducible provisioning process.
- Certifications (roadmap)ISO 27001 / SOC 2 are targeted. A security whitepaper is available on request.
Legal documents: Privacy policy · Subprocessors · Imprint
Security questions?
We answer security and privacy questions personally.