Trust means saying exactly how things are.

Where the data in the app lives, who can see it, what the assistant processes, how it is protected, and what we do not have yet. Everything here is what the app's legal texts say, in plainer words.

As of 27 October 2026 · applies to the app at app.mantodeus.com

Where the data lives

Server, database and file storage are in Germany. That does not mean every company involved is based in the EU: Cloudflare, which holds the DNS, is a US company; Hanko runs on Amazon Web Services and Mistral has US subprocessors. US authorities can request data from US companies even when it is stored in the EU.

Hetzner Online GmbH: Server, database and file storage: all application data, files, photos, encrypted backups. Data in Germany, company in Germany.
Cloudflare, Inc. USA: DNS of the domains. Until 16 November 2026 a copy of the files from before the move on 2 November still lies there under EU jurisdiction; then it is deleted. Company in the USA.
rapidmail GmbH: E-mail sent by the app from think@mantodeus.com, such as the reply to an access request: e-mail address, name, the text of the e-mail. Data in Germany, company in Germany.
Hanko GmbH: Sign-in: e-mail address, user ID, passkey keys. Data in Germany on Amazon Web Services in Frankfurt am Main, company in Germany.
Mistral AI SAS: The assistant and web research: chat, images and receipts, voice, search queries, when you use it. Data in the EU, company in France. Mistral's own subprocessors: Microsoft, CoreWeave, Google, Cloudflare.

Who sees what

Every record belongs to one business, and every query is limited to the business of the person signed in. Other businesses have no access at all.

Inside a job, everyone has their own account and a role: crew, client or subcontractor. New items start as “Only me” and you share them on purpose. Prices and amounts stay with the business.

For now the operator can look into your account (projects, documents, chats, files) to give support and fix errors. This happens on your behalf under the data processing terms; changes to records are logged.

What the assistant processes

Mantodeus calls Mistral only through its EU endpoint. What is sent depends on what you do: the chat when you write, the picture when you photograph a receipt, your voice when you dictate.

AI training. Mantodeus learns from pseudonymised extracts of the work done in the app to build its own European AI for businesses. Names, addresses, contact details and numbers are replaced first. Chats between people, bank data and photos showing people never go in. Nothing is sold or passed on. On by default, off with one switch at any time. Described in full in the app's privacy notice, § 5.

For now the operator also uses AI tools from Anthropic and OpenAI (both USA) for development and support. They are not part of the app and not processors for your data, so they never receive personal data of your clients, staff or contacts: only technical details, error messages and content with such data removed. Your own details (name, e-mail address, your support request) may be processed by these tools when you ask us for help.

How it is protected

Sign-in with a passkey or an e-mail code through Hanko. No passwords are stored.
Files sit in private storage and are only reachable through short-lived signed links.
Backups run daily, are GPG-encrypted before they leave the server, and are deleted after 30 days.
Changes to the important business records are logged with time, old and new value and the person who made them; not every change is captured.
Server access only for the operator, with key-based login.

Take it with you, or delete it

In the settings you download everything as one ZIP: every record, every file, every version of every document. A deleted file waits 30 days in the bin (Papierkorb) and comes back in one tap. You request deletion of the whole account there too; it runs after 30 days and can be withdrawn until then. Statutory retention obligations (for invoices, for example) still apply.

What we do not have

No ISO 27001 certificate.
The content is not encrypted so that only you can read it: the server writes your PDFs and the assistant reads what you give it.
Not yet cleared for health data (Art. 9 GDPR).
No separate data processing agreement to download yet: the terms and the technical and organisational measures are in section 7 of the terms of use.

Found a security issue?

Write to think@mantodeus.com with the subject “Sicherheit”: what you found and how to reproduce it. Do not send client data or keys. The rules for reporting are on the app's security page.