#### Trust Center

## Security First. Always.

Curiosity is built with security at its core to protect your data, respect your boundaries, and meet the highest enterprise security standards.

#### Compliance

Made in Germany

Built in Munich

GDPR Compliant

Hosted with customers

KI Bundesverband

Full member

#### Controls

[View all](https://curiosity.ai/resources/trust-center/controls)

- **Hosting**  
  On-premise hosting available  
  Data centers with certified providers  
  Data centers in Europe  
  [View more](https://curiosity.ai/resources/trust-center/controls#hosting)
- **Encryption**  
  Data encrypted in transit  
  Data encrypted at rest  
  Encrypted secret management  
  [View more](https://curiosity.ai/resources/trust-center/controls#encryption)
- **Access**  
  Single Sign-On (SSO)  
  Multi-factor authentication enforced through IdP  
  Strict internal access controls  
  [View more](https://curiosity.ai/resources/trust-center/controls#access)
- **Permissions Management**  
  Flexible relationship based access control (ReBAC)  
  Permissions sync with data sources  
  Permissions automatically reflect across all features  
  [View more](https://curiosity.ai/resources/trust-center/controls#permissions-management)
- **Auditing**  
  Comprehensive activity logging  
  Security event monitoring  
  Download and data-access logs  
  [View more](https://curiosity.ai/resources/trust-center/controls#auditing)

#### Resources

[View all](https://curiosity.ai/resources/trust-center/resources)

- Security & Compliance Overview  
  [Download File](https://framerusercontent.com/assets/SMUcSe5cCEgULwu6arQkyMsiMTE.docx "Download File")
- Information Security & Governance Policy
- Security Controls Standard
- Incident Response & Breach Policy
- Business Continuity & Disaster Recovery Policy
- Data Protection & Processor Policy
- Ethics & Compliance Policy

#### Data processed

###### Desktop App

- Professional email address & username
- Chat messages sent by users
- No user documents

###### Workspace (hosted)

- Professional email address & username
- Chat messages sent by users
- Documents upload by users

###### Workspace (on-prem)

- Professional email address & username
- Chat messages sent by users
- Documents upload by users

#### Subprocessors

[View all](https://curiosity.ai/resources/trust-center/subprocessors)

- **Stripe**  
  Payment processing for account handling.

- **Open AI**  
  Generate text responses to prompts using ChatGPT (developer license).

- **Cloudflare**  
  Content delivery network provider (website only, not Curiosity app).

- **Mailersend**  
  Product notifications provider

- **Google Analytics**  
  Web analytics (website only, not Curiosity app).

#### FAQ

[View all](https://curiosity.ai/resources/trust-center/faq)

###### Is our data secure with Curiosity?

###### Does Curiosity store or retain customer data?

###### Does Curiosity use customer data to train AI models?