Security & GDPR
Your customers' feedback, kept safe in the EU
Where your data lives, who can see it, and how you take it with you or delete it. Every point on this page describes what AntNexo does today.
How we protect your data
Where your data lives
- AntNexo runs on DigitalOcean in Frankfurt, Germany: the app, the database and file storage stay in the EU.
- The database is a managed PostgreSQL cluster, encrypted at rest and in transit.
- It's backed up every day, and backups are kept for 7 days.
Each workspace is walled off
- Queries on a workspace's data must name that workspace: a test fails the build when one doesn't, unless the exception is written down with its reason.
- PostgreSQL row-level security is a second wall, and the app's database role can't skip it.
- Someone outside a workspace gets "not found", not a hint that it exists. Inside it, owners, admins and members can do only what their role allows.
Sign-in without passwords
- There are no passwords to leak or reuse. Sign-in codes sent by email work for 10 minutes and 5 tries, are stored only as a keyed hash, and are rate-limited per address and per IP.
- People can sign in with a passkey, Google or GitHub instead. A passkey's private key never leaves the person's device; we store its public key.
- Session cookies are HttpOnly and Secure: page scripts can't read them, and they travel only over HTTPS.
The app and your files
- Everything is served over HTTPS, custom board domains included: their certificate is issued automatically.
- A strict Content-Security-Policy lets pages run only AntNexo's own scripts, and only the widget can be embedded in another site.
- Data exports are private: the owner downloads one through a signed link that expires in 15 minutes. Attachments open through links with an unguessable token.
Widget identity
- With widget identity on, your server signs who the user is with a secret only you and AntNexo know, so nobody can post as your customer by editing the page.
- Without it, people sign in on the widget with a code sent to their email.
AI and your content
- Posts and comments are processed by AI models run through DigitalOcean's inference platform. One of them, OpenAI's GPT-4o mini, is run by OpenAI.
- We don't use your content to train models.
- AI results are stored, so your team sees what the AI suggested. Merges stay suggestions unless you turn on auto-merge; posts the AI marks as likely spam are held back from the public board.
GDPR
AntNexo is run by a Czech company, so GDPR covers everything we do with your data.
- For the feedback on your boards you are the controller and we are your processor. For your own account we are the controller.
- A workspace owner can export its data from the settings at any time: posts, comments, votes, board visitors and the team.
- People delete their own AntNexo account from their Account page; an owner of a workspace with other members hands it over or deletes it first. A deleted workspace's data is erased after 30 days.
- People who post on your board can delete their own data with "Delete my data" on the board or the link in any notification email. Their posts stay, shown as "Deleted user".
- When you ask us to delete data, we delete it within 30 days, except records the law makes us keep, such as invoices. It leaves our database backups within 7 more days.
- The privacy policy names the companies that process data for us, what each one does, and how transfers outside the EU are covered.
- The app and your boards have no advertising or analytics trackers, and no cookies except the ones that keep people signed in.
Found a security issue?
Write to [email protected] with the details and the steps to reproduce it, and give us time to fix it before telling others. The same contact is in our security.txt.
[email protected] →Questions
Do you have SOC 2 or ISO 27001?
Not yet. AntNexo hasn't been through a third-party audit. This page lists the controls we run today; for anything it doesn't answer, write to [email protected].
Can we sign a DPA?
Yes. A data processing agreement is part of the Business plan. Write to [email protected] to sign it.
What happens to our data if we leave?
The owner exports the workspace's data, then deletes the workspace. Its data is erased 30 days later and leaves our backups within 7 more days.
A customer asks us to delete their data. What do we do?
They can do it themselves with "Delete my data" on your board, or your team can do it for them. Their email, name and sign-in are erased at once; their posts, comments and votes stay without a name.
How do we report a vulnerability?
Write to [email protected]. The same address is in antnexo.com/.well-known/security.txt.
Hear every customer, starting today
Create a workspace in a minute, share your board, and let the AI sort the first posts for you.
Free plan, no card needed.