Security & data handling

Effective: 5 September 2026

Separation and access

Your firm's data is separated by account. Administrative access is restricted, authenticated, and logged.

Encryption and location

Data is encrypted in transit and at rest. Hosting and backups are provided by Hetzner in Germany and Finland (DE/FI). Email ingest uses AWS eu-west-1. OpenAI and Anthropic extraction models involve US processing. See our subprocessor list for the services we use.

Document handling

Documents from your firm are processed only to provide the requested service and are not used to train models.

Export and deletion

Your firm can request an export and deletion, subject to legal retention requirements and normal backup expiry. Report security concerns to hello@basefolio.co.