Table of contents

...

The only data GRAVITY collects about a user is his email address and his learning progress. No other personal data is collected (not even a name or a number [of course the email may contain the name or parts of it]). Keep in mind that Gravity is an additional layer and therefore has no access to production data itself.

Do employees of Gravity Global AG have access to hosted customer data – like User IDs, audit trails and server logs.

Hosted GRAVITY instances are single tenant installations, running on isolated K8s containers. Access to any data is possible through the admin interface. The access configuration to the admin site is configured as part of the setup process. Normally Gravity Global AG employees have a dedicated admin user during the initial setup and configuration process. After that period, such admin user’s gets deleted, and the customers admin access accounts will be protected by a second factor. After that, absolutely no data can be seen or decoded by anyone expect the customer itself.

Where is my GRAVITY content (data) stored and is it in my control?

...

Yes. When we build our software we scan the built containers with Harbour. The containers are scanned with the Library Trivy.