Built on trust, secured by design
Your people's data is the most sensitive data there is. We care about protecting it, we comply with the standards that govern it, and we are formalising every certification along the way.
Privacy by design
When European banks or the public sector run sensitive survey projects with Leadbacker, there is a reason: data protection!
Data protection is a core principle at Leadbacker: you work in full GDPR compliance without compromising on convenience or functionality.
- Server location Germany: Your data is subject to German data-protection law and stays in Germany / the EU.
- Anonymous, clean surveys: Collect only what you truly need — fully anonymous on request, with no IP addresses, cookies or metadata.
- TISAX AL2 and ISO 27018 (data protection in the cloud) certification.
Standards we comply with
A layered set of compliance and security commitments across our team, our suppliers, and the product itself.
GDPR — Team & Suppliers
Full GDPR compliance applied uniformly across our own team and every contracted sub-processor, with DPAs in place and equivalent obligations cascaded down.
EU AI Act
Adaptive Leadbacker Intelligence (ALI) is designed to meet the EU AI Act — transparent, auditable, and operating within documented boundaries.
Standard Contractual Clauses
EU Standard Contractual Clauses are in place for any data transfer involving processors outside the EEA, ensuring lawful cross-border data flows.
ISO 27001
Our information security management is aligned to ISO 27001 controls, with formal certification work currently in progress.
Anonymity by design
A configurable multi-threshold (minimum 3 responses by default) ensures feedback can never be traced back to an individual.
EU-based hosting
Data is processed and stored within EU-based infrastructure, keeping it inside European data-protection jurisdiction.
How we protect your data
The technical and organisational measures that sit behind every Leadbacker workspace.
Encryption in transit & at rest
All traffic is encrypted with TLS and data is encrypted at rest.
Role-based access control
Granular, role-based permissions ensure people only see what they are entitled to.
Anonymity thresholds
Configurable response thresholds protect individual identities in every result.
EU infrastructure
Hosted on hardened, EU-based infrastructure with isolation between workspaces.
Backups & recovery
Regular encrypted backups support reliable recovery and business continuity.
Audit logging
Security-relevant events are logged to support traceability and accountability.
Audited & certified — ISO 27001, 27017, 27018
Your survey data deserves the same protection as online banking. That is why Leadbacker is continuously audited and certified by external parties — so we can run even sensitive surveys securely:
ISO/IEC 27001, 27017 (security in the cloud) & certified software development
Regular penetration tests:
IS web check and penetration tests of the backend, frontend and mobile app, externally audited.
TÜV-certified data servers:
In accordance with DIN ISO 27001, exclusively in Germany.
Full encryption:
SSL transmission plus encrypted databases and backups.
Maximum availability:
Redundancy, backups, recovery & disaster management protect your data.