How secure is my data?

Data security is our top priority. We offer various options to define and restrict storage locations and access rights.

Where is my data stored? Where is the server located?

We offer three options for data storage:

Which cloud provider is used?

Like many large companies, including Deutsche Bank, Deutsche Börse, T-Systems, and Airbus, we trust the security of Google Cloud. GIRI is hosted by default on Google Cloud. Google Cloud has been certified by the Federal Office for Information Security (BSI). More information about this certification can be found at https://cloud.google.com/security/compliance/bsi-c5.

Technical and organizational measures for data security

Our technical and organizational measures for data security can be found here: www.ar-giri.com/legal.

Data Processing Agreement

Our data processing documents can be found here: www.ar-giri.com/legal.

Data Backup

Your data is backed up overnight daily, and each backup is retained for 30 days.

Access Management

We operate on a need-to-know basis, where only select employees have access to specific data. See also our technical and organizational measures to prevent unauthorized access.

Data Protection and GDPR Compliance

The only personal data we process by default are user login details. No personal data is collected during the recording of instructions. To ensure that faces do not inadvertently appear in instructions, we implement GDPR approval. Before an instruction is published, it must be reviewed for GDPR compliance.

Encryption

All communication between the app and the server is encrypted.

Can I download my data / what file format is used?

You can download all data via the REST API. Workflows are stored in an open XML format, and all additional files are stored in standard formats (e.g., images, videos, 3D data). Additionally, GIRI instructions can be downloaded as PDFs.

User and Role Management

The basic version of user management offers three roles (Creator, Viewer, and Admin). In Q3 2024, we will release a highly flexible role system that allows for detailed customization of access rights, approval processes, and visibility groups, enabling individual role adjustments.

Single Sign-On

We offer the option to integrate a single sign-on (SSO) authentication. We work with a leading third-party provider https://auth0.com to enable virtually any integration.

MFA (Multi-Factor Authentication)

If your system is connected via SSO, we can also activate multi-factor authentication.

What happens to my data if I cancel?

You decide. We can delete your data or downgrade it to a "Viewer" account. This way, you can continue to use and share your data. We guarantee that the data will remain available for 5 years. You can also download your data at any time.