Built to keep work separate and controlled.
Workspace isolation lives in the database. Access is checked on every request, and we document what is live today and what still needs verification.
Know where each part runs.
Product hosting is planned with Hetzner in Germany and transactional email with Scaleway in France. Stripe handles billing in Ireland, with possible onward transfers outside the EEA. Cal.com is used for optional booking on the marketing site. We do not describe the service as EU-only.
TLS protects data in transit. Database roles separate application runtime, migrations and billing work. Staff access is scoped and recorded. Encryption-at-rest, backups, restore tests, monitoring and incident-response arrangements remain subject to verification and are not presented here as completed controls.
EU hosting planGermany and France
Data access, retention and recovery
Your workspace remains under your control, with documented export and closure procedures.
Export your data
Self-serve JSON exports are available for accounts and workspaces. Workspace permissions determine who can access the data.
Close a workspace
Closure includes a 30-day recovery window, with export available throughout. Operational content is then purged, subject to required accounting and security records.
Review the controls
Session tokens are stored as hashes. Scoped staff access is recorded and revocable. Structured logs use correlation identifiers and key-based redaction.
Regulations and standards
GDPR
CCPA
ISO 27001
ISO 27017
ISO 27018
GDPR and CCPA are regulations. ISO 27001, ISO 27017 and ISO 27018 are planned; haulbi does not currently hold these certifications.
Transparent about what is next.
No external AI provider currently processes customer data. Agent and document-processing features are not live. Before enabling them, we will disclose provider, region, transfer and retention terms and assess applicable EU AI Act duties.
We apply GDPR role separation between Haulbi's own account and billing data and customer-controlled workspace content. ISO 27001 and ISO 42001 certifications are not held. A signed DPA and its security annex need to be completed for processor relationships.
Security FAQ
What customers ask most often.
More questions? security@haulbi.com
Diamo ritmo alla tua azienda.
Meno tempo a rincorrere. Più tempo per andare avanti.
Guarda più da vicino