← Back to homepage

Security & Trust

AI Navigator is built for enterprise requirements — with EU hosting, GDPR compliance and full data transparency.

Hosting: Frankfurt EU
GDPR-compliant
TLS-encrypted
Row-level security
Stripe PCI DSS L1
Cookieless analytics

EU hosting in Frankfurt

All data is stored and processed exclusively on servers in Frankfurt am Main (eu-central-1) — never outside the EU. Infrastructure providers: Supabase (PostgreSQL) and Vercel (serverless compute), each with an EU data center.

GDPR compliance

AI Navigator was built for GDPR compliance: the right to erasure (Art. 17) directly in your settings, no disclosure of personal data to third parties, privacy-by-design architecture. Privacy policy, legal notice and terms are available at any time.

Data security

Row-level security (RLS) on every database table ensures that users can only read and write their own data. All connections are TLS-encrypted. Passwords are stored exclusively as hashes (bcrypt via Supabase Auth).

Transparency & no hidden trackers

Analytics via PostHog EU Cloud (cookieless, no cross-site tracking). No Google Analytics, no Facebook pixels, no ad networks. Sentry error tracking (EU region) is used solely for troubleshooting, with all text masked in session replays.

Secure payment processing

Payments are handled entirely by Stripe — certified to PCI DSS Level 1. AI Navigator stores no credit card data. Invoices, payment methods and subscriptions can be managed directly in the Stripe customer portal.

Data processing agreement (DPA)

Data processing agreements under Art. 28 GDPR are in place with all sub-processors (Supabase, Vercel, Stripe, PostHog, Resend). On request, we will provide you with a DPA for your own GDPR documentation.

About the founder

Daniel Ostner

Daniel Ostner brings over 20 years of experience across SAP landscapes and enterprise IT — spanning chemical distribution, automotive supply, and SAP consulting. As Chief Architect at a globally operating chemical distribution company, he held €5M budget responsibility (OPEX/CAPEX), led a team of 14 internal and 30 external resources, and directed an international S/4 greenfield rollout. Previously, as SAP Basis Manager at an automotive supplier, he ran SAP operations for plants across four continents in a 24/7 environment, including SOX/SOD audit responsibility.

For roughly 7 years, he served as Head of IT and SAP Senior Consultant at a mid-sized SAP consulting firm — responsible for internal IT and as project lead for clients in building materials and automation technology. Before that, he worked as a SAP Senior Technology Consultant at a SAP consulting firm specializing in mechanical engineering and industrial clients, as well as in SAP Basis roles at a technology corporation and an IT services provider.

Certified in PRINCE2 Foundation, ITIL V3 Foundation, ISO/IEC 27001 fundamentals, as a Data Protection Officer, and through IESE's Executive Program in Data & AI (2023). AI Navigator grew out of a 191-page concept paper bundling the methodological foundation for enterprise AI strategy, governance, and use-case prioritization.

Questions about privacy & security?

For data protection enquiries, DPA requests or security questions, contact us directly.

Legal texts (Impressum, Datenschutz) are only available in German, as legally required.