Security and data handling

Security controls

• Data location

  Uploaded files are processed and stored on servers in Germany. The authoritative list of service providers is maintained in the German subprocessor list.

• Encrypted transfer

  Pages, uploads and downloads use HTTPS. Results are delivered through time-limited, signed links rather than a public storage directory.

• Constrained processing

  Conversion runs without administrator privileges, with a read-only filesystem and memory and runtime limits per processing step. Uploaded files are read as data, not executed. Network content cannot be fetched by a file parser during a job.

• File and archive checks

  GeoVerto identifies content instead of trusting the extension. Archives are checked for path traversal, symbolic links, nested archives and excessive compression before extraction.

• Access controls

  Accounts use passwords and verified email addresses. Active sessions can be reviewed and ended. API keys can be restricted by IP range, given an expiry and rotated. Support sees workspace data only after a temporary read-only grant.

• Deletion

  Anonymous source files are removed when processing finishes, and results after download or by the configured deadline of 15 minutes. Signed-in retention follows the account class; files can be deleted earlier from the workspace.

• Database recovery checks

  The database is backed up daily and the backup is restored in a test on the following night. Uploaded working files are not part of that database backup; their deletion policy continues to apply.

• Operational monitoring

  Availability, internal services, storage capacity, certificate lifetime and backup state are checked every five minutes. Operational logs exclude file contents and error-message text; rate limiting stores IP addresses only as salted hashes.

• Traceability

  Uploads and downloads receive SHA-256 checksums. A processing manifest records the tools, versions and parameters used for each conversion. Security-relevant account events are logged.

• Data-processing documents

  A German data processing agreement under Article 28 GDPR, its technical and organisational measures and the subprocessor list are available for business and public-sector review. The German versions are authoritative.