Who can get into your apps?
Your employees sign in with their company account, through Google Workspace or Microsoft Entra. Auftrieb stores no passwords. The owners of an app decide who may use it.
You approve external people such as clients or service providers one by one for a single app. They sign in with a code sent by email.
What happens when someone leaves the company?
When a company account is deactivated, access to the apps ends automatically. Nobody has to go through the apps one by one.
When does an app become public?
Apps you build yourselves are internal. An app only becomes public when the responsible team expressly confirms it. Administrators can forbid public apps for the whole organisation.
Where is your data?
The servers are in Hetzner Online GmbH data centres in Germany, and the backups are in Germany too. On request, Auftrieb runs in your own Hetzner account. We are also glad to support other server environments. AI usage runs through your own account with the AI provider.
A data processing agreement under Art. 28 GDPR is available on request. You can download your code at any time, and you get an export of your data on request.
How do the backups work?
Every night a backup is created and kept for seven days. You restore it directly on the app page.
How are credentials protected?
Auftrieb stores API keys and passwords for your other systems encrypted and separately from the code. This way, not everyone has to manage their own keys.
How does Auftrieb deal with vulnerabilities?
All running apps are checked daily for known vulnerabilities in the packages they use. Findings appear on the app page, and you fix them with your AI tool.
What is in the audit log?
Every change to apps, access and settings is recorded: who, when, what and through which tool.
When does support have access?
Support only gets into your organisation when an administrator opens access, and only for a limited time.
What does Auftrieb handle and what stays your job?
Auftrieb handles
- Running the servers
- Nightly backups
- Certificates for your own domain
- Daily checks for known vulnerabilities
- Audit log for changes
Your job
- The code of your own apps
- Looking after your company accounts
- Deciding who gets access and which data belongs in an app
Do you have more questions about security?
If your IT team or data protection officer wants to know more, we are glad to go through their questions together. Write to info@auftrieb.cloud.