Compliance & Certifications

Laioutr GmbH

• GDPR-compliant: yes, with documented TOMs and a standard DPA
• EU-only hosting: yes, Frankfurt exclusively
• ISO 27001: in preparation — on our roadmap
• SOC 2: not currently planned

Infrastructure stack (inherited certifications)

Our underlying infrastructure is extensively certified:

• Vercel: ISO 27001:2022 · SOC 2 Type 2 · TISAX AL2 · DPF
• Supabase: SOC 2 Type 2 · ISO 27001:2022 · HIPAA · PCI DSS
• Upstash: SOC 2 Type 2

Vendor security questionnaires

We are happy to complete security and privacy questionnaires (e.g. SIG Lite, CAIQ, custom templates). Send your request to security@laioutr.com.

➡️ Related: Data Protection (GDPR) · Subprocessors · Security Measures