Security & compliance
Where your training data lives and who sees it.
The platform runs in Germany and is operated by our own engineers. What your security team needs for its review is on this page.
Send us your questionnaireHosted in GermanyServers at HetznerActive
GDPRData processing agreement, Art. 28Available
Two-factor sign-inFor all accountsAvailable
Audit trailWith person and timeActive
ISO 27001Certification in preparationIn preparation
Three things your security team asks first.
Where does the data live? Who can see it? How do people sign in?
Hosted in GermanyThe platform and its data run on servers at Hetzner in Germany. For AI features we also use providers outside the EU that do not store your requests.
Workspaces kept apartEvery customer works in its own workspace. What is stored there is visible only to the people you admit.
A second factorEvery account can secure its sign-in with a second device.Everyone sees only their part.
Three roles decide what a person can do inside a workspace.
OperatorsSet up the workspace, manage people and see the reports.
ContributorsWork in the area assigned to them, such as a course or a ward. They do not manage the workspace itself.
LearnersSee their own courses, progress and certificates. Nothing else.
How we run it.
The controls behind the platform, in plain words.
✓Regular backupsWe back up all workspaces regularly so that data can be restored after an error.
✓Audit trailEvery change to courses, roles and training records is logged with person and time.
✓Personal data exportLearners download their personal data as a package. The link expires automatically.
✓Reviewed changesEvery change to the platform passes automated tests and a code review before it goes live.
✓Technical and organisational measuresDocumented in writing. We send them to you with the data processing agreement.
✓Data protection contactQuestions about data protection go to hallo@fracto.de.
Operated by people
Built and run by one steady team.
Fracto is built and run by a team that has developed software together since 2012. When your security team has a question, it reaches the people who wrote the code.
Meet the team →Questions from your security team?
Send us your questionnaire. The engineers who run the platform answer it.
Security questionnairehallo@fracto.deSubject “Security review”. We send the data processing agreement and the TOMs with our answer.Talk to us
Next stepISO 27001We are preparing for ISO 27001 certification and will report progress on this page.