Draft, as of 19 October 2026. This translation is for information only; the German version is binding. Complete and have it legally reviewed before publication.
1. Operation and infrastructure
KI.ordo runs on a single server managed by us [location or hosting provider and country]. In the Enterprise plan, KI.ordo runs on a server of the customer; the customer is responsible for its physical security and operating system unless otherwise agreed.
All content is stored in a database on this server. We use external services only for AI answers and for the purposes listed on the Subprocessors page.
2. Encrypted transmission
Under our domain, KI.ordo can only be reached via HTTPS (TLS). Login cookies are then sent exclusively over encrypted connections. The connection to the AI provider is always encrypted.
3. Login and access
- We store passwords only as a hash using the scrypt method with a random salt.
- Sessions use an HttpOnly cookie with SameSite protection. On the server, we store only a hash of the session key. A session ends after 14 days or on logout.
- We likewise store API keys only as a hash. They can be revoked at any time; their last use is visible.
- Roles per workspace: Owner, Admin, Editor and Viewer. Each person sees only the workspaces of which they are a member.
- Important changes are recorded in the workspace’s change log.
4. Protection against misuse
- Public endpoints such as login, the contact form, the website chat and webhooks limit the number of requests per address and minute.
- You can restrict the website chat to approved websites.
- Web requests from flows cannot reach internal or private network addresses.
- A monthly token limit per workspace prevents unexpected costs.
5. Backups
The database is backed up every night. We keep the backups of the last seven days. [Location of the backups, e.g. additionally encrypted off-site]
6. Organisation
Adapt sections 6 and 7 to actual practice before publication.
- Only [number / roles] persons who are bound to confidentiality have access to the server.
- We access customer content only if this is necessary for support or operation or if the customer requests it.
- Devices with access to the server are encrypted and protected by a screen lock.
- We securely erase or destroy data carriers that are no longer needed.
7. Updates and testing
We keep the operating system and software packages up to date and test new versions of KI.ordo with automated tests before release. [Add external security audits or certifications once available]
8. Incidents
If we detect a personal data breach, we inform affected customers without undue delay and support them with their notification obligations. Where we ourselves are the controller, we notify the supervisory authority of the incident within 72 hours (Art. 33 GDPR).
9. Reporting vulnerabilities
Have you found a vulnerability? Write to [email protected]. Please give us time to fix the problem before you publish it, and do not access other people’s data.