Security & Privacy FAQ

Last updated: April 9, 2026

Common questions from customers about how Blina Desk AI handles data, privacy, and security. For detailed legal terms, see our Privacy Policy and Data Processing Agreement.

Where is my data stored?

All data is stored exclusively in Germany (European Union) at a certified data center provider. Databases, files, backups, and logs never leave the EU. We do not use any non-EU storage providers.

Can other customers see my data?

No. Every customer operates in a completely isolated environment. Data isolation is enforced at the database level — it is technically impossible for one customer to access another's data, even in the case of a software bug.

What happens with AI and my data?

AI features are entirely optional. When enabled, only the data you actively submit is sent to the AI provider for processing. Your data is never used for model training — all providers operate in API-only mode under data processing agreements.

You can choose which modules and data sources the AI can access, and you can disable AI completely at any time from the SuperAdmin panel.

For organizations with stricter requirements, the on-premise version supports fully local AI processing with no external data transfer.

Which AI providers do you use?

We support OpenAI (GPT), Anthropic (Claude), Google (Gemini), and self-hosted models. All cloud providers are US-based but operate under the EU-US Data Privacy Framework and Standard Contractual Clauses. Details and links to each provider's DPA are in our Data Processing Agreement.

Is there a digital signature feature?

Digital signatures (eIDAS-compliant) are on our roadmap. When available, they will support qualified and advanced electronic signatures for contracts, HR documents, and consent forms. Contact us for the latest timeline.

How does email work in Blina?

You connect your own business email server (Gmail, Outlook 365, or any IMAP/SMTP provider). Blina syncs your messages and lets you send from your own domain. Your credentials are encrypted — we never see them. Emails are not routed through our servers. See our Email Setup Guide for instructions.

Do you have backups?

Yes. Automated daily backups with multiple redundancy layers, including offsite copies within the EU. Recovery procedures are tested regularly. See our Privacy Policy for retention details.

Is there two-factor authentication?

Yes. Two-factor authentication (2FA) via email is available and enabled by default for all accounts. After entering your password, you receive a 6-digit code to confirm your identity.

Can I get an on-premise installation?

Yes. Blina Desk AI is available as a self-hosted installation for organizations with stricter regulatory or data sovereignty requirements. In this mode, all data and AI processing stays on your own servers. Contact us at [email protected] for details.

Do you have certifications?

Our infrastructure provider (Hetzner) is ISO 27001 certified. Blina Desk AI itself follows GDPR by design with comprehensive technical and organizational measures. For enterprise customers, we provide detailed security documentation and additional contractual clauses upon request and under NDA.