Skip to content

Security and privacy

Your data stays your data.

Konseq holds what matters most in a company. That’s why permissions, separation and traceability aren’t bolted on later – they are the core.

Questions about security or privacy? Write to us

Hosting and location

Where Konseq runs and how data is backed up.

  • Data centres in Frankfurt At launch

    Konseq runs on Google Cloud in the Frankfurt am Main region (europe-west3).

  • Backups with restore At launch

    Automatic backups with point-in-time restore, plus an export per company in a second location.

  • Backup before every update

    Before an update restructures the database, a backup is taken automatically.

  • Encrypted in transit

    Konseq is only reachable via HTTPS.

Separate per company

Each company stands on its own – even after a spin-off.

  • Own address At launch

    Each company reaches Konseq under its own name, such as your-name.konseq.pro.

  • Own data

    One company’s data never appears in another. Even people working in several companies see them separately.

  • Spin-offs without mixing At launch

    A spun-off company gets its own data. You decide beforehand what goes along.

Sign-in

Whoever gets in is who they claim to be.

  • Two-factor

    With an authenticator app and ten recovery codes. Mandatory for admins, optional for everyone else.

  • Hashed sessions and keys

    Sessions and access keys are stored only as a hash, never in plain text.

  • Signing out where needed

    A new password signs out all your other sessions. Locking a person ends all their sessions immediately.

  • Invitation by link

    Valid for seven days and usable only once.

  • Throttled sign-in attempts

    Repeated failed attempts are slowed down.

Permissions

What someone may see and do is decided by the code – not by a setting you can forget.

  • Roles

    Admin, partner, employee and external. Partners and employees see their projects and their tasks, nothing else.

  • Admins only by default

    Every interface has a defined access level. If none is given, it automatically means: admins only.

  • Checked per entry

    Every access is checked against the person’s view. Anything outside it responds as if it didn’t exist.

  • Private lists

    Personal daily and weekly lists are visible only to their owner – not even to admins.

  • No special rights for the AI

    The AI always acts as a machine on behalf of a person and has at most their rights. It cannot decide, sign off or start work. More about AI

Traceability

Nothing changes silently.

  • History on every change

    Who changed what and when – on every entry, from the very beginning.

  • No change without a person

    The database rejects a human change that has no person attached. Forgetting causes an error, never a wrong attribution.

  • Archive, not delete

    Projects are archived. If a single entry is deleted, the history records who did it.

AI and data

What goes to the AI is as little as needed and never secret.

  • Your key, your contract At launch

    You use the AI with your own key and hold the contract directly with the provider.

  • Secrets are removed

    Passwords, keys and credentials are removed before any AI request, log entry or export.

  • Documents are information

    What’s in documents counts as information for the AI, never as instructions.

  • Usable without AI

    If you don’t want AI, don’t add a key. Konseq stays fully usable.

Us as the operator

We run Konseq. Your content belongs to you.

  • No access without approval At launch

    We have no access to your content. Support only if you grant it – time-limited and logged.

  • Data processing agreement At launch

    Under Art. 28 GDPR, with technical and organisational measures and the list of sub-processors.

Taking your data with you

You can leave at any time – with everything you entered.

  • Complete export At launch

    The owner can export all of a company’s content at any time – without credentials.

  • After cancellation At launch

    Everything stays readable and exportable for 30 days. After that, data, files and backups are deleted, with confirmation to the owner.

  • Disconnect means delete

    Disconnecting a Google account revokes access. The data imported from it is deleted in Konseq.

Start with what’s up next.

Konseq is being prepared for launch. Want to be in early? Tell us what you’re working on.