Skip to content

Security

How we protect your data.

Hosting and data location

  • The app and database are hosted on Render in Frankfurt, Germany.
  • Files are stored with Cloudflare in the EU.
  • Some services, including AI models, process data outside the EU.

AI and your data

  • Voltplot's assistant uses models from OpenAI and Anthropic.
  • These providers may process data outside the EU, including in the USA.
  • On request, we limit your organisation to OpenAI models run by Microsoft Azure in the EU.
  • We do not train AI models on your data. Our AI providers do not use your data to train their models.

Encryption

  • All connections to Voltplot use HTTPS with TLS 1.2 or newer.
  • Our hosting providers encrypt data at rest with AES-256.

Access control

  • Accounts are available by invitation only.
  • Sign in with Google or Microsoft to use your company's login policy.
  • Production access is restricted to the people who operate the service.

Data isolation

  • Each organisation's data is logically separated. No organisation can access another's data.

Backups

  • The production database is backed up daily.
  • Backups are encrypted and stored in the EU.
  • We regularly test backup restoration.

Development and monitoring

  • Every change passes automated tests before release.
  • Dependencies are checked for known vulnerabilities daily.
  • Security updates are applied promptly.
  • We monitor our systems for errors and outages.

Data export and deletion

  • You can delete your account in the app.
  • Contact us to export or delete your organisation's data.

Subprocessors

Our subprocessors, what they do and where they process customer data.

  • Render

    App servers and database

    Frankfurt, Germany

  • Cloudflare

    Website, network protection, file storage and processing

    Files: EU. Network: worldwide

  • Auth0 (Okta)

    Sign-in

    EU

  • Backup servers

    Backups and maintenance

    EU

  • OpenAI

    AI models

    Not limited to a region

  • Microsoft Azure

    AI models for organisations limited to the EU

    EU Data Boundary

  • Anthropic

    AI models

    Stored in the USA. Processed in the USA, Europe, Asia or Australia

  • Vercel

    AI gateway

    Worldwide

  • Mistral

    Text extraction from documents and images

    EU

  • Exa

    Web search by the assistant

    USA

  • Google

    Address search

    Worldwide

  • Esri

    Map imagery

    Worldwide, including the USA

  • Mapbox

    Maps and place search

    USA

  • Cesium

    3D terrain

    USA

  • Resend

    Email

    USA

  • Attio

    Customer management

    EU

  • PostHog

    Product analytics

    Frankfurt, Germany

  • Sentry

    Error monitoring

    Frankfurt, Germany

  • Pydantic Logfire

    Logs and traces

    Netherlands

Security contact

Report vulnerabilities to [email protected] with steps to reproduce them. We answer security questionnaires and provide a data processing agreement on request.