Your data stays in Europe
Uslimato is fully operated on servers within the European Union. No data transfers to third countries, no US Cloud Act, no compromises on data protection and compliance. Your IT asset data is exclusively subject to European law.
Compliance at the highest level
Uslimato is designed to comply with the most important European and German regulations. From data protection and information security to IT service management.
ISO 27001: Information Security
Uslimato's architecture is designed for ISO 27001 conformity: access controls, encrypted data transmission, complete audit trails, and regular security reviews. All security measures align with the requirements of the international standard for information security management systems.
GDPR: General Data Protection Regulation
Privacy by design and by default: minimal data collection, row-level security for tenant separation, audit-proof logging, and the right to erasure are built into the platform. All personal data is processed exclusively within the EU.
BDSG: German Federal Data Protection Act
As a complement to the GDPR, Uslimato meets the specific requirements of the German Federal Data Protection Act. Particularly regarding employee data processing, data processing agreements, and technical-organizational measures.
GoBD: German Digital Record-Keeping Standards
Uslimato's audit log meets GoBD requirements for traceability and immutability: every change is logged with timestamp, user, and context. Export interfaces enable integration with existing accounting systems.
Independence from Big Tech gatekeepers
Uslimato relies on open interfaces and a public REST API. No lock-in to single cloud providers, no dependency on US hyperscalers. Integrations with existing systems are possible via the API at any time. You retain full control over your data.
ITIL 4: CMDB & Change Processes
Uslimato can be used as a CMDB component in ITIL processes: structured asset tracking, lifecycle processes, and change management with complete documentation. Every change to configuration items is traceably logged.
Infrastructure you can trust
Our technical infrastructure is designed to meet the highest security and data protection requirements.
EU data centers
All servers are located in certified data centers in Germany. No data leaves the European Union. Neither for backups nor for processing.
Encryption everywhere
TLS 1.3 for all connections, encrypted databases, and secure JWT tokens in HttpOnly cookies. No unencrypted data transmission.
Tenant isolation
PostgreSQL row-level security guarantees complete data isolation between tenants. No tenant can access another tenant's data. Technically impossible, not just organizationally.
European sovereignty vs. US cloud dependency
Many companies entrust their most sensitive data to US cloud providers. Often without understanding the legal consequences.
- ✕Server locations often non-transparent
- ✕GDPR compliance legally disputed
- ✕Dependency on a single ecosystem
- Servers in German data centers
- GDPR, BDSG, and GoBD natively integrated
- Open API. No vendor lock-in
