Data protection & IT security

The highest standards for the security of your data.

Data security guaranteed

collectAI guarantees comprehensive data protection at a technical and organisational level. As an Aareal Bank AG company, we operate within the framework of strict guidelines in the area of IT security and fulfill these beyond the legally required standards of the General Data Protection regulation (GDPR).

TÜV-certified data protection

collectAI fulfills the legal requirements for data protection, the catalogue of requirements for data protection as per TÜV Saarland, the current state of the art principles governing IT security based on the fundamental IT protection regulations set out by the BSI, as well as the international standard for management systems for information security: ISO/IEC 27001.

Certificate

Data storage in Germany according to ISO 27001

collectAI uses cloud technology with servers located in Germany. Comprehensive contracts ensure that the data never leaves Germany. This applies to all business customers from the EU. The cloud provider is comprehensively certified and uses the highest security standards such as ISO 27001 and PCI.

Comprehensive
data encryption

Using robust RSA procedures, collectAI encrypts all data during storage and transmission. collectAI uses modern encryption techniques with the highest security standards.

Modern
security standards

Thanks to measures such as intrusion detection, the logging of all activities, and extensive physical security measures, collectAI guarantees a high level of security. For access to sensitive system areas and data, collectAI uses central key management and 2-factor authentication.

Regular
security tests

External experts regularly carry out security penetration tests. In this way we ensure that our systems are always protected against unauthorised access.

Our Data Protection Officer
Dr. Frank Eickmeier
Head of Legal Affairs