GDPR-Oriented Usage

Typically: PII detection (regex and model-based), configurable masking before forwarding to AI models, audit logs of all data-modifying actions, tenant-isolated storage, a DPA per Art. 28 GDPR and a documented deletion/pseudonymisation process after contract end. These tools support your own compliance but do not replace it.

Within technical means: data export in JSON/ZIP format on request, audit trail for traceability, deletion in the database and object storage within 30 days after contract end, removal from the encrypted backup archives on a rolling basis per retention plan (at most six months). Responding to access requests from end users remains the controller's (customer's) responsibility.

For standard tenants, the DPA available online at hoviguard.eu/en/avv is deemed accepted upon acceptance of the Terms of Service during registration/checkout. Enterprise customers may request a separately signable PDF version via datenschutz@hoviguard.eu.

HOVIGuard notifies the customer of any personal data breach without undue delay, in any case within 72 hours of becoming aware (target ≤ 24 hours on business-day detection), in text form to the admin address registered in the tenant. The detailed process is documented in the incident response playbook.

No. For a binding assessment of your use case — particularly involving special data categories (Art. 9 GDPR), DPIA obligations or sector-specific rules — we recommend involving your data protection officer or qualified counsel.