Maximum security. No compromises.
GDPR-compliant, hosted in Germany, the EU or the US, and your data is never used to train AI.
ISO 27001-certified hosting
No AI training with your data
GDPR-compliant
Foundation
Protection at every level
Infrastructure, access and privacy – three layers that keep your budgets, invoices and forecasts safe.
Hosting and infrastructure
Every customer runs in its own environment in Germany, elsewhere in the EU or in the US, as its setup requires, behind a web application firewall.
Encrypted in transit and at rest
Encrypted backups with documented restore tests
Continuous uptime and error monitoring
Basis
Hetzner, Germany, EU or US region, with the full security standard of this page.
Plus
AWS optional, Germany, EU or US region and a 99.5% uptime SLA.
Enterprise
Private, on your provider’s infrastructure, custom SLA – or on-premises.
Product and access security
Your team signs in through your identity provider, sees only the studies its roles allow, and every change leaves a trace.
Single sign-on via OAuth 2.0 / OpenID Connect
MFA and IP allow-listing
Role-based access per study
Single Sign-On
Entra ID, Okta, Google or any OpenID Connect provider; SAML is possible.
Audit Trail
Every change and every export of budgets, invoices and forecasts, with user and time.
Secure Development
OWASP Top 10 as the baseline, code review and tests before every release.
Privacy and compliance
Trialytix GmbH is based in Germany, so the GDPR applies to all processing, wherever your data is hosted. Your data runs the service and nothing else.
Data processing agreement with TOMs
No patient data needed
21 CFR Part 11 readiness
Your Data, Your Exit
Export budgets, invoices and reports as CSV or PDF at any time.
No AI Training
Your budgets, invoices and forecasts are never used to train AI models.
Validation Support
Part 11 readiness and support for your computer system validation.