Enterprise AI Data Security

Security and Credibility are our Central Currency

At ZopaAI, we recognize the sensitivity of our customer data. That’s why we use state-of-the-art technology and industry standards to ensure the highest security.

Our Security Principles

Security

The security of our customer data is our top priority. All our data is stored in a separate database for the customer only, so that it cannot be linked to other customer data. All our backups are encrypted and stored locally to provide the best possible protection against attacks.

Expertise

Our team consists of experienced IT experts, located in one of the worlds most respected Cybersecurity Clusters, which includes important research institutions such as the CISPA Helmholtz Centre for Information Security and the German Research Center for Artificial Intelligence (DFKI). Due to cooperations we are continuously able to meet the highest safety standards.

Local Storage

ZopaAI adheres to the highest standards in IT-Security. All our servers are located in Germany and are additionally protected by our local encryption methods. By that, we secure your data with top-tier protection and newest standards.

Our Security Measures

BruteForce Protection

Requests to our backend are controlled by a rate limit, which restricts the number of requests allowed within a specific time frame. This measure significantly reduces the risk of attacks by limiting the volume of requests that can be made by potential attackers.

Backup Encryption

To enhance security, we employ symmetric encryption methods for data protection. Our backups are encrypted using a combination of AES-256-bit and RSA-4096-bit, both of which are recognized as industry standards for secure encryption. This ensures that backup data is highly secure and protected against unauthorized access.

Strict separation of customer data

We use encryption methods to securely store each customer’s data in a separate database. Because this data is isolated and cannot be cross-referenced with data from other customers, there is no risk of data exposure or leakage between customers. This approach ensures that each customer’s information remains fully private and protected.

Encapsulation

Through the use of Kubernetes and Docker, our systems are isolated from one another. This containerization prevents unauthorized access to individual components (such as the database, cache, and backend) from other installations. This setup enhances data privacy and security by ensuring that each component operates independently, minimizing potential vulnerabilities.

TLS/SSL Encryption

All data transmission paths are encrypted using TLS/SSL and can only be accessed through secure connections. This does not only apply to accessing our services stricly through the HTTPS protocal, but also the transport and upload of backups.

Password Hashing

Passwords are stored only as salted hashes using PBKDF2, a method particularly resistant to brute-force and rainbow table attacks. Passwords are not stored in plain text under any circumstances.

Authentication

Only authenticated users with the required permissions are able to access the data. Access is strictly prohibited without proper authorization and login credentials.

Local server

We use servers from the providers AWS and Netcup who are located in Germany. All backups are either encrypted with an additional layer of security or stored locally.

Limited Storage period

All our data is only stored for as long as is necessary for our product. Monthly backups are stored for a maximum of 6 months. As soon as the data is no longer required or the customer terminates the cooperation, it will be deleted in accordance with the legal requirements.

24 h emergency support

In the event of a problem, our IT emergency service is available 24 hours a day to take immediate action in an emergency.