Skip to main content
LLMs.md

Security & Privacy

LiteLog supports privacy-friendly and secure operations through hosting in Germany, technical safeguards for data transmission and storage, and organizational security measures within the application. On this page you will find the most important information about hosting, encryption, access control, backups, and data protection.

Hosting & Data Location​

LiteLog hosts all data exclusively in Frankfurt am Main. Production and backup data never leave Germany. This means operations take place within a clear German hosting framework.

Encryption & Technical Safeguards​

Data is protected during transmission via TLS 1.2 or TLS 1.3. For stored data, LiteLog uses full-disk encryption; backups are created as encrypted snapshots. Passwords are hashed with bcrypt, and sensitive tokens are additionally protected with AES-256.

Access Control in the Application​

Various security mechanisms are available for protection within the application. These include a role-based permission system with granular permissions, session timeouts, and device binding for mobile logins. Critical actions are traceably logged in audit logs.

Backups & Availability​

LiteLog creates automated snapshots at least once daily, and up to three times daily on higher plans. Backups are retained for 30 days plus additional monthly roll-ups. According to the public security page, multiple copies are maintained in the Frankfurt cluster; LiteLog targets 99.9% planned availability for production environments.

Data Protection & GDPR​

LiteLog is designed for GDPR-compliant operations. This includes in particular the hosting location in Germany, technical and organizational safeguards, and the option to conclude a Data Processing Agreement (DPA). Whether the specific use case is fully GDPR-compliant in individual cases also depends on the respective usage scenario, the data processed, and customer-side processes.

Data Processing Agreement (DPA)​

A Data Processing Agreement is available upon request. If you need a DPA, you can contact LiteLog.

Data Access & Deletion Requests​

If you need support with data access or deletion requests under GDPR, please contact LiteLog via our contact form. To delete your entire LiteLog account, see the Delete account page for detailed instructions.

Frequently Asked Questions​

Is LiteLog GDPR-compliant?

LiteLog supports GDPR-compliant operations through hosting in Germany, encryption during transmission and storage, and the option to conclude a DPA. The specific data protection assessment also depends on the respective usage scenario and customer-side processes.

Where is data stored?

All data is hosted exclusively in Frankfurt am Main according to LiteLog. Production and backup data never leave Germany.

How is data protected?

LiteLog protects data during transmission with TLS 1.2/1.3 and during storage with full-disk encryption. Backups are created encrypted. Additionally, a role-based permission system and audit logs are used.

Can I conclude a DPA?

Yes. According to LiteLog, a Data Processing Agreement is available upon request.

Is there an on-premise option for LiteLog?

Yes. By default, LiteLog is a cloud solution hosted in Frankfurt. Upon request, installation in your own infrastructure (on-premise) or on dedicated servers is also possible.

Who can I contact about data protection questions?

For questions about DPA, data access, or deletion requests, please reach out to LiteLog directly via our contact form.

Why is digital attendance tracking more privacy-friendly than a paper list?

Paper lists offer no access protection, no automatic deletion, and no proof of data access. They can also be photographed with a smartphone at any time and forwarded — after which there is no control over the data. Digital recording protects personal data through encryption, role-based permissions, and audit-proof logging. This is especially relevant at educational institutions, where paper lists in the classroom are openly visible to all participants. Collecting less data but exposing it in an uncontrolled manner is not a less intrusive measure in terms of data protection.

Further Information​

Further information can be found on LiteLog's public Data Security & Hosting in Germany page.