Lector Studio

Security & Compliance

Maximum protection for your data — from architecture to operations

Infrastructure & Hosting

  • European data centers (OVHcloud, Germany/France)
  • No data transfer outside the EU
  • Kubernetes-based infrastructure with automated deployment
  • Redundant systems and automatic failover

Encryption & Data Protection

  • TLS-encrypted communication (in transit)
  • AES-256 encryption of stored data (at rest)
  • GDPR-compliant data processing
  • Data Processing Agreement (DPA) and Technical & Organizational Measures (TOM) available

Access Control

  • Role-based access control (RBAC)
  • Single Sign-On (SSO) via Keycloak
  • Audit logging of all security-relevant actions
  • Principle of least privilege

Certifications & Standards

  • ISO 27001 certification in preparation (planned 2026)
  • GDPR-compliant operations since founding
  • Regular security audits and penetration tests
  • Information Security Management System (ISMS) under development

Deployment Options

For maximum control, we offer hybrid and on-premise deployment in addition to our cloud solution.

Cloud — hosted in European data centers

Hybrid — AI models in your infrastructure, platform hosted by us

On-Premise — fully within your own infrastructure

Legal Documents

All relevant security and data protection documents are available in our Legal Center.

Go to Legal Center

Questions about security?

Our team is happy to answer your questions about security, compliance, and data protection.

Get in touch