Security & Privacy
LiteLog supports privacy-friendly and secure operations through hosting in Germany, technical safeguards for data transmission and storage, and organizational security measures within the application. On this page you will find the most important information about hosting, encryption, access control, backups, and data protection.
Hosting & Data Location
LiteLog hosts all data exclusively in Frankfurt am Main. Production and backup data never leave Germany. This means operations take place within a clear German hosting framework.
Hosting models
By default, LiteLog runs as a cloud solution on the main platform. For organisations with special requirements for data sovereignty or infrastructure there are two further hosting models. The hosting model determines how often and how extensively updates arrive. Every change to the system is a release with a version number and release notes; updates do not change the audit trail.
| Hosting model | Updates | What it means for operations |
|---|---|---|
| Main platform, shared with other accounts, hosted in Frankfurt am Main | 2 to 3 updates per month, each with release notes | The lowest operating effort. Changes arrive continuously and can be traced via the release notes. |
| Dedicated server at LiteLog, for your account only | Updates bundled, in agreed windows. Checked beforehand on an acceptance environment. | You decide the timing. The same feature level as the main platform, but only after your acceptance. |
| On-premise, on your own servers | A frozen version is handed over. Updates only when necessary, for example security fixes. Larger version jumps as a project. | The fewest changes. In return the highest effort per update, because installation and testing take place on site. |
Dedicated server and on-premise are available on request. Contact LiteLog directly for this.
Encryption & Technical Safeguards
Data is protected during transmission via TLS 1.2 or TLS 1.3. For stored data, LiteLog uses full-disk encryption; backups are created as encrypted snapshots. Passwords are hashed with bcrypt, and sensitive tokens are additionally protected with AES-256.
Access Control in the Application
Various security mechanisms are available for protection within the application. These include a role-based permission system with granular permissions, the two-factor sign-in with an authenticator app (optional per account or as the company requirement "Two-factor for everyone" with a deadline), the sign-in with Microsoft through the company's Microsoft directory (on request as the only sign-in instead of a password), session timeouts, and device binding for mobile logins. Critical actions are traceably logged in audit logs.
Backups & Availability
LiteLog creates automated snapshots at least once daily, and up to three times daily on higher plans. Backups are retained for 30 days plus additional monthly roll-ups. According to the public security page, multiple copies are maintained in the Frankfurt cluster; LiteLog targets 99.9% planned availability for production environments.
Data Protection & GDPR
LiteLog is designed for GDPR-compliant operations. This includes in particular the hosting location in Germany, technical and organizational safeguards, and the option to conclude a Data Processing Agreement (DPA). Whether the specific use case is fully GDPR-compliant in individual cases also depends on the respective usage scenario, the data processed, and customer-side processes.
Data Processing Agreement (DPA)
A Data Processing Agreement is available upon request. If you need a DPA, you can contact LiteLog.
Data Access & Deletion Requests
If you need support with data access or deletion requests under GDPR, please contact LiteLog via our contact form. To delete your entire LiteLog account, see Delete account for detailed instructions.
Frequently Asked Questions
Is LiteLog GDPR-compliant?
LiteLog supports GDPR-compliant operations through hosting in Germany, encryption during transmission and storage, and the option to conclude a DPA. The specific data protection assessment also depends on the respective usage scenario and customer-side processes.
Where is data stored?
All data is hosted exclusively in Frankfurt am Main according to LiteLog. Production and backup data never leave Germany.
How is data protected?
LiteLog protects data during transmission with TLS 1.2/1.3 and during storage with full-disk encryption. Backups are created encrypted. Additionally, a role-based permission system and audit logs are used. Accounts can be protected with the two-factor sign-in (authenticator app); companies with a Microsoft directory use the sign-in with Microsoft; LiteLog checks such sessions at Microsoft at least every 24 hours and signs out an account that is blocked there.
Can I conclude a DPA?
Yes. According to LiteLog, a Data Processing Agreement is available upon request.
Is there an on-premise option for LiteLog?
Yes. By default, LiteLog is a cloud solution hosted in Frankfurt. Upon request, installation in your own infrastructure (on-premise) or on a dedicated server at LiteLog is also possible. What this means for the update cadence is shown in the table under Hosting models.
Who can I contact about data protection questions?
For questions about DPA, data access, or deletion requests, please reach out to LiteLog directly via our contact form.
Why is digital attendance tracking more privacy-friendly than a paper list?
Paper lists offer no access protection, no automatic deletion, and no proof of data access. They can also be photographed with a smartphone at any time and forwarded — after which there is no control over the data. Digital recording protects personal data through encryption, role-based permissions, and audit-proof logging. This is especially relevant at educational institutions, where paper lists in the classroom are openly visible to all participants. Collecting less data but exposing it in an uncontrolled manner is not a less intrusive measure in terms of data protection.
Further Information
Further information can be found on LiteLog's public Data Security & Hosting in Germany page.
How LiteLog implements the ALCOA+ data integrity principles is described on Data Integrity & ALCOA+. The rules of the audit trail are on Audit Trail Principles.