Security & Compliance Overview
At EnteleKI, protecting your data and securing our systems is our highest priority. We use state-of-the-art technologies and industry best practices to ensure confidentiality, integrity, and availability.
1. Encryption & Data Transit
All data transmitted between your browser and our servers is strongly encrypted using SSL/TLS (HTTPS).
Our TLS configurations are continuously scanned and evaluated by independent systems (like Mozilla Observatory), where we regularly achieve the highest rating (A+).
2. Hosting & GDPR Compliance
Our servers and databases are hosted in highly secure data centers within the European Union (EU).
We process all personal data in strict compliance with the European General Data Protection Regulation (GDPR).
3. Identity & Access Protection
We support secure authentication standards including Google OAuth, Microsoft OAuth, Sign in with Apple, GitHub OAuth, and passwordless Magic Links.
Session tokens (JWT) are strictly transmitted over secure, encrypted channels.
Regular account access is passwordless; if internal or test credentials use passwords, they are stored with modern, resource-intensive hashing algorithms.
4. Continuous Security Auditing
Our codebase undergoes automated security scanning (Static Application Security Testing - SAST) on every update.
We perform daily audits on third-party dependencies for known vulnerabilities and patch them immediately.
Security-critical system changes undergo controlled review processes prior to deployment.
5. Protection for Data at Rest
Sensitive uploaded and generated documents (such as founder CVs, shareholder lists, or financial data) are stored in our Startup Vault.
These files are encrypted directly in the backend at the file level (At-Rest) before being written to the database or storage layer.
Vault documents and stored secrets at rest are encrypted with AES‑256‑GCM and 256‑bit keys.
Every document and file-chunk stream receives a unique, randomly generated nonce (cryptographic single-use value) to completely eliminate nonce-reuse vulnerabilities.
The 256‑bit key length is considered resistant to currently known quantum attacks. This is not a certification that TLS, signatures, passwords, or the overall system are post-quantum secure.
IT Security & Data Protection
Certificates, encryption standards, and continuous security audits of our infrastructure.
Mozilla Observatory
Live verification of our security configurations and SSL/TLS security headers.
Qualys SSL Labs
Independent assessment of our SSL/TLS server configuration and cipher strength.
SSL/TLS Encryption
Encrypted connection via Cloudflare SSL with automatic Let's Encrypt certificates.
Privacy & GDPR
All data processing is GDPR-compliant in secure EU data centers.
Dependency Scanning
Automated daily audits of third-party packages to prevent known vulnerabilities.
Static Code Analysis
Continuous SAST security checks of the codebase using Semgrep CE prior to release.
Web Standards & Code Quality
Compliance with international accessibility, semantic, and codebase guidelines.
W3C HTML5 Validierung
Automated verification of code structure and compliance with official HTML5 web standards.
W3C CSS Validierung
Compliance with official style and CSS standards for accessible and error-free rendering.
W3C i18n Validierung
Compliance with international standards for character encodings, languages, and global web compatibility.