Trust Center
How we run and protect this website.
Where data is hosted, which providers process it, the security measures in place and how to report a vulnerability. This page covers the website; the platform's own information will follow before launch.
Hosting and data location
The website and its database run in the European Union, in Frankfurt, Germany. Static content such as images and scripts may be delivered through a global network so pages load quickly.
- Application hosting
- Vercel Inc. – region Frankfurt (EU); static content via a global network
- Database
- Neon Inc. – PostgreSQL on AWS Frankfurt (eu-central-1)
- File storage
- Vercel Blob – Frankfurt (EU)
Sub-processors for this website
These providers process personal data on our behalf when you use this website.
| Provider | Purpose | Location | Safeguards / legal basis |
|---|---|---|---|
| Vercel Inc. (USA) | Website hosting | EU (Frankfurt) / global CDN | DPA, SCCs, EU–US Data Privacy Framework |
| Neon Inc. (USA) | Database | EU (Frankfurt) | DPA, SCCs |
| Google Ireland Ltd. | Google Analytics 4, only with your consent | EU / USA | Consent, EU–US Data Privacy Framework |
| Matomo | Cookieless visit counting | EU | Legitimate interest |
| Cloudflare, Inc. (USA) | Spam protection for the contact form (Turnstile) | Global network | Legitimate interest, EU–US Data Privacy Framework |
| E-mail delivery provider | Notifications about enquiries | To be confirmed | To be confirmed |
This list covers the website only. The sub-processor list for the Fidempli platform will be published here before launch.
Security measures
HTTPS with HSTS
All traffic is encrypted. Browsers are told to connect only over HTTPS.
Strict Content Security Policy
The browser loads scripts and other resources only from sources we have approved.
Two-factor authentication for admins
Access to the content management area requires a second factor.
Minimal personal data
We collect only what we need. IP addresses are stored only as hashes, for rate limiting.
No third-party requests before consent
Fonts are self-hosted. Analytics that need consent load only after you agree.
EU-hosted, encrypted connections
The website and its data are hosted in the EU (Frankfurt), and connections to the database are encrypted.
Certifications
Fidempli does not currently hold a security certification. We will publish our certification plans on this page once they are confirmed.
Responsible disclosure
If you find a security vulnerability in this website, please tell us. E-mail info@fidempli.de with “Security” in the subject. Describe the issue, the steps to reproduce it and the affected URL.
When testing, please follow these rules:
- Do not access, change or delete data beyond what is needed to show the issue.
- No denial-of-service attacks.
- No social engineering, phishing or physical attacks.
- Give us reasonable time to fix the issue before you disclose it publicly.
What we do: we acknowledge your report, keep you informed while we fix the issue and credit you on request. We do not run a bug bounty programme.
Start with a 30-minute AI risk conversation.
A senior consultant replies within one business day. Or join the 3–5 design partners shaping the platform before launch.