Skip to content
ContactRequest a demo

Security & data protection How your data is processed and protected.

Information on hosting, AI processing, access and deletion – plus documents to support your assessment.

Data flow

Where your data is processed

From your data to the AI features: which service does what.

  1. Your data

    Survey data, open-ended responses and documents that you upload to deepsight cloud.

  2. Hosting & data storage

    deepsight cloud and slide factory run on Microsoft Azure in the EU.

    Provider
    Microsoft Azure
    Location
    Data centers in the EU
  3. AI features

    For AI features we use Azure OpenAI, also in the EU. Microsoft does not use your data to train AI models.

    Provider
    Microsoft (Azure OpenAI)
    Governed by
    DPA under Art. 28 GDPR

An overview of the service providers we use is available on request.

Access, encryption, deletion

What happens to your data in operation

Access

Support access to your content is only possible with time-limited approval from your admin – for 24 hours, 7 or 30 days. Access then ends automatically, and you can revoke it at any time.

Encryption

Data is encrypted in transit (TLS) and at rest (AES-256).

Deletion & export

For uploaded datasets, you set a retention period per project or for the whole organization; responses from surveys in deepsight cloud are currently excluded. deepsight warns you by email before deletion, and every deletion is recorded in the deletion log. If you wish, only the original data is deleted; key figures, dashboards and reports remain, including the quotes in them. Export is possible in open formats.

Documents & evidence

What is available for your review

Documents on request

  • Data processing agreement (DPA) under Art. 28 GDPR
  • Technical and organizational measures (TOMs)
  • Overview of the service providers we use
  • Deletion concept with configurable periods
  • Support with your data protection impact assessment

Evidence and status

ISO 27001Certification of the information security management systemIn preparation
DPAData processing agreement under Art. 28 GDPRAvailable
Service provider overviewService providers we useOn request
Details

More for IT and procurement

Hosting & locationsOperations on Microsoft Azure in the EU, AI features via Azure OpenAI and agreed availability.View hosting details Enterprise requirementsSign-in via SSO, roles, deployment model and scope of support.View enterprise requirements

Documents for your review

We send you the DPA, TOMs and other documents for your project.

Request documentshi@deepsight.de