Security
Enterprise security.
Without the enterprise NDA.
Per-tenant data isolation. AES-256-GCM at rest. EU hosting. GDPR + DPA. Responsible disclosure: security@globalchatbot.ai.
✓ GDPR · Compliant✓ DPA · Available✓ GDPR compliant · Available✓ EU data residency · Available✓ DPA available · Available✓ EU Data Residency · Default
Defense in depth
Four layers.
Built into the platform. Documented for your audit. Tested by us and externally.
🔐
Encryption
- ✓ AES-256-GCM at rest for sensitive fields (API keys, OAuth tokens)
- ✓ TLS 1.2+ for all connections, HSTS preload list
- ✓ Encrypted backups, separate keys, off-site (Hetzner Storage Box)
👤
Access control
- ✓ Per-tenant data isolation: own database rows + Pinecone namespace
- ✓ Role-based access (owner / admin / editor / viewer)
- ✓ SSO (SAML / OAuth) available on Business plan
- ✓ Audit log of all admin actions, exportable
🏰
Infrastructure
- ✓ Hosted on Hetzner (Germany, EU)
- ✓ Per-process isolation via systemd and PM2
- ✓ Database backups: daily, 7-day rolling + monthly archives
- ✓ DDoS protection at edge
📊
Monitoring
- ✓ 24/7 uptime monitoring via UptimeRobot
- ✓ Application logs aggregated and searched
- ✓ Anomaly detection on auth flows
- ✓ Incident response: under 60 minutes engineer engaged
Found a vulnerability?
We pay for finding holes.
Responsible disclosure honored with public credit and swag. For security issues, contact security@globalchatbot.ai. PGP encryption available on request.
support@globalchatbot.ai →Built secure by default.
Free plan, 50 conversations a month, no card. Enterprise security on every plan. No NDA required.
Free plan: 50 conversations/month, no card