Security & trust

A privacy tool that practises what it preaches

Your register holds personal data, so we are transparent about how we host and protect it. Built by privacy specialists in the Netherlands and Belgium.

Your data stays in the EU

GDPR app runs on servers in Germany, operated within the EU. Your data does not leave the European Union. Transfers and storage locations are documented in the register itself, so you always know where data sits.

EU hosting in Germany

Encryption in transit and at rest

Multi-factor authentication for admin access

Hosted in the EU · Germany

Our legal and security documents

Everything published and available to read before you sign up.

Subprocessor register

Every subprocessor, what they do and where they process data.

Security & operational measures

The technical and organisational baseline we commit to.

Privacy policy

How we process and protect personal data in line with GDPR.

AI annex

How the AI features handle your data and what they do not do.

SaaS service terms

The agreement that governs your use of the service.

Service level agreement

Our commitments on availability and support.

About the lawyer sign-off

GDPR app helps you build and maintain an audit-ready Article 30 record. The legal review and sign-off is performed by your own lawyer, a qualified professional you choose and trust. We provide the workspace and a clear review surface, the legal judgement stays with them.

Transparent by default

Read the documents, then start your free trial.

Start free trial