Table of contents

...

Rest: In our case OpsOne encrypts the data and keeps it safe (Linux Unified Key Setup ( LUKS)). On premise: the data safety cannot be guaranteed by Gravity Global AG or its cloud providers. 

...

Data-retention: Depends on hosting choice. Available through cloud provider’s service offering. 

On the website I see the following sentence “User activity is continuously monitored and progress can be tracked.” How do you ensure GDPR compliancy?

We are GDPR compliant, we collect no personal data besides the email address, we stated this in our wiki and at the top but here is an excerpt:

...

Detailed plugin descriptions are available at: Plugin Version 2.x Browser Extensions
There are only two things stored within the plugins local storage: A TTL and an URL.

...

The plugin will only be installed on the clients and not on the server.
Detailed plugin descriptions are available at: Plugin Version 2.x Browser Extensions

What kind of application controls such as e.g. logging mechanism, data quality check, error messages are implemented to ensure completeness, integrity, accuracy and authorization of data?

...

Yes. When we build our software we scan the built containers with Harbour. The containers are scanned with the Library Trivy.

What are your partners regarding the hosting infrastructure?

...