At Connecteeva, data protection is not a checkbox or a marketing promise. It is the basis of every decision – from server selection to the last log entry.
🛡️ Overview
Four Layers. One Promise.
Security at Connecteeva is not a single feature, but an interplay of infrastructure, encryption, transparency and law.
🏢
Hosted in Germany
ISO 27001-certified data centres. Not a single byte leaves the EU – and no US company has access.
🔐
End-to-End Encryption
TLS 1.3 on all connections and end-to-end encryption with OX Guard.
📋
Complete Audit Logs
Every admin action is logged in a tamper-proof, audit-safe manner. Who did what, when – always traceable.
🇪🇺
Data Sovereignty
Schrems-II-compliant, no US parent company, no CLOUD Act. Your data belongs to you – not to us, not to Washington.
🏢 Hosting & Infrastructure
European Infrastructure. No Compromises.
All Connecteeva services run exclusively on servers in Germany – in data centres certified to ISO 27001 and meeting the highest physical security standards. Not a single service runs on Amazon Web Services, Microsoft Azure or Google Cloud infrastructure. No silent sub-processors in the US, no hidden data transfers across the Atlantic.
On top of that, our operational model is built entirely on open source technology: all services we use are open source, independently auditable and free of proprietary black boxes. What runs on your servers is something you can verify yourself.
Data CentresGermany · ISO 27001
Operatorczichos.net GmbH, Berlin
US HyperscalersNone
Software Stack (Services)100% Open Source
Monitoring24 / 7 active
Data Protection FrameworkGDPR · Schrems II
BackupsDaily · encrypted
📋 Audit Logs
Every Action. Completely Logged.
Connecteeva logs every administrative action in the system – automatically, in a tamper-proof way and in real time. Who created a user? When were access rights changed? Which admin activated which service when? The answers are always at hand.
Complete traceability – every change to users, roles and services is documented
Tamper-proof – logs cannot be altered or deleted after the fact
GDPR-compliant logging – only what is necessary, without superfluous personal data
Compliance-ready – relevant for BSI IT-Grundschutz, ISO 27001 and internal audits
🔒
admin.connecteeva.eu
🇪🇺 Data Sovereignty
Your data belongs to you. Not to Washington.
Many European cloud offerings sound European – but they're not. The difference lies in ownership, not location.
US Companies with EU Data Centres
Data centre in Frankfurt. Law in Washington.
Physical server location in the EU
Parent company subject to US law
Data disclosure possible under CLOUD Act
Schrems II risk not fully resolved
Affects Microsoft DE, AWS Frankfurt, Google Cloud EU
What is the CLOUD Act? The US "Clarifying Lawful Overseas Use of Data Act" of 2018 obliges US companies to hand over data on order from US authorities – regardless of where that data is physically stored. This applies to all subsidiaries and all infrastructure operated by US corporations worldwide.
Connecteeva
European. From beginning to end.
Physical server location in Germany
Operated by czichos.net GmbH – a German company
No US parent company, no disclosure obligation
Optional: own infrastructure (on-premise) for maximum control
🔐 Encryption
Encrypted. At Every Layer.
Connecteeva protects your data at two levels – in transit and in the content of the communication itself.
🚀
Transport Encryption
All connections between your device and our servers are encrypted to the current standard. No traffic travels over the network unprotected.
TLS 1.3 on all connections · Older protocols (TLS 1.0/1.1) disabled · HSTS enforced · Perfect Forward Secrecy
🔒
OX Guard – End-to-End
With OX Guard, emails are encrypted on your device – before they reach our servers. Even we cannot read the content. Included in every plan at no extra cost.
PGP encryption · S/MIME support · Encrypted notes and attachments · Key control remains with the user
Questions about security?
Security you can actually prove.
We're happy to answer specific questions about infrastructure, compliance or certifications. Just write to us.
The content of this website has been compiled with care and to the best of our knowledge. It is provided for information purposes only and does not constitute legally binding statements. We accept no liability for the content of external websites accessible via links, as we do not adopt their content as our own. All texts, images, graphics and brands contained on this website are protected by applicable intellectual property rights and may not be used without permission.
This website uses no cookies, no tracking and no analytics tools. Fonts are served locally. No data is shared with third parties for advertising or analytics purposes.
Server logs (hosting)
This website is operated on servers owned by czichos.net GmbH in Germany. When you visit the site, technical access data is automatically recorded: IP address, date and time, URL accessed, browser type and referrer URL. This data is used solely for the secure technical operation of the site and is deleted after a few days.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Contact
If you contact us by email, we process your email address and the content of your message to handle your enquiry. This data will not be passed on to third parties and will be deleted after final processing, unless statutory retention obligations apply.
You have the right to access, rectification, erasure, restriction of processing and data portability. You may also lodge a complaint with the competent supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).
Where processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to processing at any time (Art. 21 GDPR). Please direct your objection to: carsten@czichos.net
