Trust
that stands up to scrutiny
Security, certifications, data protection and contracts: here you will find all the evidence you need for your assessment.
Proven Security
Bpanda is made in Germany, from code to hosting.
ISO 9001
& TISAX
MID GmbH meets international standards for quality management and information security, independently certified. This is complemented by an internal ISMS based on BSI IT-Grundschutz.
Encryption
& Access
Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Access is role-based and follows the principle of least privilege, optionally via your own identity provider.
Developed and hosted in Germany
Bpanda is developed entirely in-house in Nuremberg, with no outsourcing and no unknown third parties in the development process. Your data is stored exclusively in German data centers of the IONOS Cloud, with redundant systems, automatic load balancing and daily backups.
Strict
Tenant Isolation
Every Bpanda customer has their own independent, logically separated data area. Access between tenants is ruled out at both the application level and the database level.
Certifications & Compliance
Our own safeguards and those of our data center work hand in hand. The result is an end-to-end chain of security, audited against German standards.
Development & Operations
MID GmbH · Nuremberg, Germany
Data Center
IONOS Cloud · Germany
Data Protection & Data Processing
We process your data exclusively in accordance with the GDPR.
Every processing activity is tied to a clear purpose, and the rights of data subjects are protected at all times. We provide you with a data processing agreement before you start using Bpanda. It sets out exactly which information is collected and for what purpose.
Make sure to start your data export beforehand. After that, the content can no longer be restored.
This independent review covers all processing activities, from tenant isolation to permission management. You can view the evidence as part of the data processing agreement.
Hosting & Infrastructure: IONOS Cloud
Bpanda is developed in Nuremberg.
Your data is stored exclusively in German data centers of the IONOS Cloud, encrypted, backed up daily and monitored around the clock.
Guaranteed overall availability
Backups of your data
SLA of our cloud provider
Monitoring & Incident Response
Secure hosting with IONOS
When our own server room reached its limits, we migrated our entire infrastructure to the IONOS Cloud: around 80 virtual machines and 60 terabytes of storage.
Today, Bpanda runs in its own virtual data center, GDPR-compliant and at 20 percent lower cost than with comparable hyperscalers.
AI Use &
Classification under the EU AI Act
The translation feature in Bpanda
uses your browser’s native interface.
Translation happens directly on the user’s own computer. No process data whatsoever is transferred to MID servers or to any third-party AI providers.
That is why external AI providers are not on our list of subprocessors.
- Runs locally in the browser
- No model training
- Minimal risk
Minimal-risk system, general-purpose AI without high-risk potential under Annex III
MID provides the platform interface. When the feature is used locally in the browser, the customer is the deployer within the meaning of the EU AI Act.
The feature is clearly recognizable as an assistant and can be overridden at any time.
Legal & Transparency
This information is freely accessible.
Document Center
These documents contain internal security information.
We are happy to send them to you, we just need your contact details first.
We use your details solely to send you the document.
No newsletter, no sharing with third parties.
We use your details solely to send you the document.
No newsletter, no sharing with third parties.
We use your details solely to send you the document.
No newsletter, no sharing with third parties.
We use your details solely to send you the document.
No newsletter, no sharing with third parties.
We use your details solely to send you the document.
No newsletter, no sharing with third parties.
We use your details solely to send you the document.
No newsletter, no sharing with third parties.
Contact
Questions about security or compliance?
Our security team answers questions about certificates, reports and contracts.
We are also happy to fill out your IT department’s security questionnaire for you and support you in successfully procuring Bpanda.