Skip to content

SECURITY & CONTROL

Your data deserves
a clear framework.

Transparent data processing. Separate customer environments. Traceable changes. See what Guard has implemented today and what we are extending.

Explore the safeguards
06 / YOUR FRAMEWORK
Your data.
Your rules.
Your decision.

SAFEGUARDS WITH A CLEAR STATUS

Implemented today.

How Guard processes and protects your data in ongoing product operation.

01

Data processing

Operation and hosting by Digital Impact Technology as a subprocessor, using Hetzner Online GmbH data centres in Germany.

We use specialist services for authentication, email delivery, map display and AI analysis. Some involve processing in the USA on the basis of EU Standard Contractual Clauses. The full list forms part of the data processing agreement.

02

Separate customer data

Each customer has a separate tenant with segregated data. On request, we provide a dedicated instance with its own database.

03

AI use

AI analysis uses the OpenAI API. Under the contractual terms, your data is not used to train the models.

04

Personal access

Users work with personal accounts. Suppliers receive time-limited, single-use links and can only see their own data.

05

Protected transmission

Data is encrypted in transit using TLS. HSTS ensures that supporting browsers establish the connection over HTTPS.

06

Traceable changes

Changes to supplier data, documents, approvals and assessments are logged with the time and the person responsible.

07

Contractual provisions

A data processing agreement (DPA) forms part of every contract. We announce changes to subprocessors in advance.

THE NEXT STEPS

Being implemented.

These enhancements are not yet committed as available safeguards.

More granular access control

Roles within customer accounts, mandatory multi-factor authentication (MFA) and single sign-on (SSO) with your identity provider are being implemented.

Encrypting stored data

Encryption of stored data and backups is being implemented.

This information concerns the Guard product. Details of your provider are available in the Legal notice, and information about the public website in the Privacy Policy.

YOU SET THE FRAMEWORK.

More support.
Clear responsibility.

Together, we define tasks, approvals and boundaries. Binding decisions remain with your team. Before deployment, we align your IT and data protection requirements with the available safeguards.

Explore the three levels of autonomy

GET TO KNOW GUARD

What are your company’s requirements?

Let’s discuss the data, access and safeguards for your planned Guard setup – with your IT and data protection teams involved if you wish.