Where your data lives, and who can access it

Each organization's data is hosted in the European Union, in Germany, on its dedicated instance, and backed up every night. On-premises deployment is an option on every plan, on quotation.

At the end of the contract, the full export takes the repository and re-imports into an empty database. Landscapes export to the architecture tools exchange format, with the actual type of each relationship, and dossiers export to Word or PDF.

MIP-IT SARL processes personal data in line with Regulation (EU) 2016/679 (GDPR). We collect only the data that is strictly necessary, apply technical and organisational measures intended to prevent unauthorised access, alteration, loss or disclosure, and limit access to authorised personnel.

You can exercise your access, rectification, deletion, restriction, objection and portability rights at any time. The full detail of how we process personal data is on the Privacy page.

Each critical or important function is followed to the applications, ICT third-party providers and contracts that support it, each with its owner. The DORA register of information fills from this chain, kept current all year by its owners.

An auditor account reads the scope and period of its engagement, read-only, and the board log gives it every decision with its reason.

Every object has an owner, work runs through cases, and every change carries its author. Segregation of duties is on by default, and its removal by the administrator is logged.

An AI acts with the permissions of the person who uses it. The administrator can bar it for a person, a role or a domain, and each change states whether an AI acted.

Visit events (page view, scroll to mid-page, click on an action button, form steps, the choice made in the banner) are recorded in the site's database, hosted with it in the European Union, in Germany. The database does not record the IP address: it keeps only a hashed fingerprint of it.

Consent cookies keep your choice for one year. Google Analytics and its measurement cookies are activated only after your explicit consent. The visitor identifier is kept in your browser only if you accept the measurement. The detail, and what the trial form keeps, are on the Privacy page.

For any security, data protection or compliance question, write to MIP-IT SARL, which publishes ArchiLU in Luxembourg.