Trust Center
Everything about security, privacy and compliance at CRM Proxy in one place. The information describes the actual state of the system.
Last updated: 2026-11-09
At a glance
Hosted in Germany
Servers at Hetzner in the Nuremberg data centre (ISO/IEC 27001).
Encrypted
HTTPS with HSTS; credentials encrypted with a separate key per customer (AES-256-GCM).
Backups in the EU
Twice a day, encrypted, kept for 30 days.
No tracking
No analytics or advertising tools, no third-party content.
Two factors
TOTP with recovery codes, mandatory for platform administrators.
Data minimisation
Contact data from CRMs is not stored, phone numbers in logs only pseudonymised.
Documents
- Security – technical and organisational measures (TOMs)
Measures under Art. 32 GDPR: hosting, encryption, access, integrity, availability, deletion.
- Compliance: GDPR, NIS2, KRITIS
Our role under the GDPR and how we support your supply-chain assessment under NIS2 and KRITIS.
- Subprocessors
Who processes data on our behalf, for what and where.
- Privacy policycoming soon
Which data we process, for how long and your rights.
- Data processing agreement (DPA)
Template agreement under Art. 28 GDPR; concluded in text form on request.
- Supplier assessment questionnaireson request
We answer your security and privacy questionnaires.
- Legal noticecoming soon
Provider identification under § 5 DDG.
Contact
Documents on request, questionnaires and reports of security vulnerabilities: via your contact at CRM Proxy.