Digital Sovereignty & Data Security
In an increasingly complex digital world, trust and security are the most important currency. For us at Ghostthinker, digital sovereignty and data security are not optional. They’re a necessity.
Our Promise for Your Security and Control
Our solutions are designed from the ground up to give you maximum security and transparency.
Developed and Hosted in Germany
We don’t just develop our software in Germany, we also run it exclusively on servers located here.
- Strict compliance with German and EU law
- No third-party access
- Germany as a business location
Our processes and products are 100% compliant with the General Data Protection Regulation (GDPR).
We continuously subject our systems and processes to external security audits.
We automatically and effortlessly provide you with a legally compliant Data Processing Agreement (DPA).
We use state-of-the-art SSL/TLS encryption to optimally protect your data during transmission.
Ghostthinker vs. Other Providers
| Ghostthinker | Other Providers | |
|---|---|---|
| Server Location | Germany | Globally distributed, often USA |
| Data Protection | 100% GDPR-compliant | Often only EU standard clauses, US Cloud Act relevant |
| Development | In Germany | International, often outside the EU |
| Security Audits | Regular audits | Irregular or internal only |
| Data Sovereignty | Full control for you | Limited control, third-party access possible |
What Else We Do to Protect Your Data
Your digital security is an ongoing process. That’s why at Ghostthinker we go one step further to comprehensively protect your data and give you full control at all times.
Two-Factor Authentication (2FA)
Add extra protection to your account: enable two-factor authentication in our products.
Deletion Policy & Data Minimization
Our clear deletion policy ensures that your data is securely and irretrievably removed after defined retention periods.
Daily Backups & Disaster Recovery
Daily backups and a proven disaster recovery plan ensure your information can be restored at any time.
Frequently Asked Questions
edubreak® usage data (customer data, courses, videos, comments): This remains 100% on servers operated by Hetzner Online GmbH in Germany. Hetzner is a German, ISO 27001-certified provider.
Internal business processes (e.g., contracts): For this, we use Google Workspace. Your contractual partner for this data processing is Google Ireland Limited. We have configured Google so that this data is physically stored on servers within the EU.
Yes, absolutely. We work strictly according to the principles of data minimization, purpose limitation, and defined deletion periods. We have concluded legally sound Data Processing Agreements (DPAs) with all subcontractors (such as Hetzner and Google). GDPR compliance is an integral part of our information security management.
ISO/IEC 27001:2022 is the international gold standard for information security. By aligning with this standard, we commit to systematic management of IT risks, clear contingency plans, and regular audits. We are currently undergoing the formal certification process for this standard. For you, this means your data is protected not by “gut feeling,” but by hard, verifiable security standards.
EU servers & contracts: The data is physically located on servers within the EU. Legal protection is provided through the Data Processing Agreement integrated into Google Workspace, including the official EU Standard Contractual Clauses (SCCs).
Certified security: Google undergoes the strictest independent audits and is certified under, among others, ISO/IEC 27001 (information security) and ISO/IEC 27018 (data protection in the cloud).
Encryption: Data is strongly encrypted both in transit and at rest, ensuring your data remains protected under strict GDPR requirements even within internal processes.
Ready for True Digital Sovereignty?
Want to learn more about how Ghostthinker can strengthen your digital sovereignty? Or do you have specific questions about our security standards and certifications? Contact us now!