Security

Security & Privacy

How we protect your data and workflows.

Your data stays in the EU

Fully self-hosted on dedicated hardware in the European Union. Self-managed database. No shared cloud instances. No third-party access.

Zero Data Retention

All AI providers are configured with Zero Data Retention. Prompts, inputs, and outputs are processed and discarded. Nothing is retained downstream.

Your data is never used for training

All training and publishing endpoints are excluded. Your workflows exist for generation only, never for model improvement.

Row-Level Security

Every database table is protected with Row-Level Security. Your projects, boards, nodes, and edges are isolated at database level. No user can access another user's data.

TLS 1.3 encryption

All connections are secured with TLS 1.3. Traffic between your browser and our servers is fully encrypted. API calls to AI providers run over HTTPS. Additional edge protection is active.

Secure authentication

Authentication runs through Supabase Auth with Google OAuth and email support. Session tokens are short-lived and securely managed.

GDPR compliant from day one

Austrian law applies. All data processing happens within the EU. For full details, see our Privacy Policy.