personeo.ai
Log in Book a demo
Security & Trust

Built for enterprise.
Designed for trust.

Security and privacy are built into Personeo from the start. Your data stays protected, private and under your control.

security@personeo.ai
  • EU hosted
    Hetzner, Germany
  • No model training
    on customer data
  • AES-256
    sensitive fields & backups
  • Enterprise SSO
    OpenID Connect (OIDC)
  • Regularly pentested
    evidence on request
  • 99.5% SLA
    availability commitment
SECURITY PRINCIPLES

Security is part of the product,
not an appendix.

EU data protection
EU hosting and processing, with retention you control.
Data security
Encryption in transit, at rest and in backups.
AI privacy
Your data powers your training, never models.
Identity & access
Your identity provider, your roles and teams.
Operational security
Isolated, monitored, tested and built to recover.
DATA FLOW

Where does
your data go?

From the user’s browser into an EU environment in Germany, and to a separate EU-configured AI provider. Customer data is processed within the configured EU flow and is never used to train underlying models.

YOUR ORGANIZATIONUser in the browserYour identity provider
TLS
PERSONEO EU ENVIRONMENT · GERMANY
APPLICATION
Personeo production
Isolated from development and staging
TENANT ISOLATION
Customer ACustomer BCustomer C
⇄
DATA LAYER
Production databaseObject storageEncrypted, tested backups
AI REQUEST
SEPARATE PROVIDER · OPENAI
AI PROCESSING BOUNDARYEU-configured processing✓ No model training
AI & DATA PRIVACY

Your data trains your people.
Not our models.

AI is at the core of Personeo, so AI privacy gets the same attention as infrastructure security. Here is exactly what happens to conversation data.

✓Customer data is never used to train AI models
✓AI processing is configured for EU processing
✓Zero Data Retention used where applicable to configured services
✓Voice audio is processed in real time and is not persistently stored unless recording is explicitly enabled for the customer configuration
✓Transcripts are retained according to your policy
Voice audioNOT STORED BY DEFAULT
Browser→Real-time AI processing→Temporary buffer
TranscriptRETAINED PER POLICY
Conversation ends→Transcript & feedback→Your retention policy
Model trainingNEVER USED
Customer data→✕ Excluded

Roleplays run on fictional personas and scenarios. Personeo does not require real customer or patient data to operate.

IDENTITY & ACCESS

Your identity provider.
Your rules.

Users sign in through your identity provider. Inside Personeo, access follows your workspaces, teams and roles.

AUTHENTICATION
Handled by your identity provider
Your IdPe.g. Entra ID
→
OIDCOpenID Connect
→
Your policiesincl. MFA
AUTHORIZATION
Controlled inside Personeo
Workspacee.g. EMEA
→
Teame.g. Germany
→
RoleAdmin, Manager, Rep
→
AccessContent and results
SECURITY OPERATIONS

Protected, monitored
and built to recover.

The operational controls behind the platform. Implementation details are available in our security documentation.

Infrastructure and isolation

Separate production, logical tenant isolation and restricted access.

PRODUCTION
Customer ACustomer BCustomer C
✕DEVSTAGINGNo production data
Reliability and recovery

Monitored backups, documented recovery and regular restore testing.

99.5%
Monthly availability SLA
✓ Encrypted and tested backups✓ Tested disaster recovery
Security operations

Central monitoring, documented incident response, risk-based vulnerability management and controlled changes.

1Detect
2Contain
3Investigate
4Recover
5Reviewincl. customer communication
ACCESS AND GOVERNANCE
SSOMFARole-based accessControlled secrets managementReviewed subprocessors
RETENTION & DELETION

You decide how long
data is kept.

Production retention is configured to your requirements and contract. There is no one-size-fits-all period.

Configurable production retentionBackups expire within 30 days
Active data
Kept according to your retention policy.
Delete
Deleted on request, following agreed rules.
Removed from active system
Permanently removed from the active environment.
Backup expiry
Maximum 30 days
Encrypted backup copies expire within 30 days.
COMPLIANCE & GOVERNANCE

Privacy by design,
documented for review.

Clear commitments your privacy, legal and procurement teams can verify.

GDPR
EU hosting and processingData Processing AgreementConfigurable retentionDeletion controls
EU AI Act
Training and coaching use caseHuman oversightNo autonomous employment decisions
Subprocessors
Reviewed for privacy and security, with contractual safeguards.
HetznerInfrastructure and hosting · Germany
OpenAIAI processing · EU processing
Better StackMonitoring and observability
FAQ

Security questions,
answered.

The questions security, privacy and procurement teams ask us most often.

Data and hosting

Personeo production infrastructure is hosted by Hetzner in Germany. Customer application data is stored within the EU.

AI and privacy

Access

Operations and reliability

Compliance and governance

Security documentation

Need to complete
your security review?

Get access to our security and legal data room with the architecture overview, DPA, SSO guide and additional technical materials.

security@personeo.ai
  • System architecture & environment segregation
  • Security, privacy & data processing overview
  • System functionality & data flow overview
  • SSO setup guide
  • Data Processing Agreement
  • Subprocessor information
  • Penetration test evidence
  • SBOM, where required