Security and architecture
Infrastructure
All processing happens on EU-based servers (Scaleway in France/Netherlands, Hetzner in Germany). Data never leaves the European Economic Area for core processing.
Encryption
In transit — All connections use TLS 1.3
At rest — Stored metadata and configuration data is encrypted
Access control
Dashboard access requires authentication. Role-based permissions ensure users only see what's relevant to their role. Admins see organization-wide analytics. Users see only their own highlights.
Subprocessors
Service | Purpose | Location |
|---|---|---|
Scaleway | Application hosting, database | EU |
Hetzner | AI model hosting | Germany |
Paddle | Billing | UK (adequacy decision) |
Proton | Email communication | Switzerland (adequacy decision) |
No third-party AI
BeeSensible uses its own detection model hosted on its own infrastructure. Your text is never sent to OpenAI, Google, or other external AI services.