---
title: "Security and hosting of the GDPR record | Dplex"
description: "Data hosted in Europe, role-based access, internal record reachable only through a signed link or an allowed network, optional AI, no trackers."
url: https://dplex.eu/en/security-hosting
language: en
---

# Security and hosting

A GDPR record describes sensitive data. Dplex hosts it in Europe, limits access by role, exposes the internal record only through a signed link or an allowed network, and calls AI only on your request.

## Hosting in Europe

Data hosted and processed in the European Union, TLS-encrypted communications.

## Role-based access

Administrator, DPO, contributor, reader: each sees and changes only what is theirs. Organisations are kept separate.

## Protected internal record

The full record is reachable only through a signed link valid 7 days or from a network you allow.

## Public policy only

The public page exposes only the processing activities marked public, the DPO and the exercise of rights.

## AI on request

AI-assisted analysis only runs when you ask for it; the deterministic engine remains the source of truth.

## No trackers

Neither the website nor the application sets any advertising or third-party measurement cookie.

## Who is responsible for what

Your organisation is the controller of the data it describes and enters in Dplex (record, requests, breaches, interviews, awareness); Klicat, publisher of Dplex, acts as processor within the meaning of the GDPR. For your account data, Klicat is the controller.

## Reversibility

The full internal record can be exported at any time as HTML or PDF. At the end of the contract, your data is returned to you in a usable format, then deleted.

## Documents

Privacy policy of the website and the solution.
[Privacy policy](https://dplex.eu/en/privacy)

## Try Dplex on your record

Free, no commitment: describe your first processing activities and see what is missing.

[Free trial](https://app7.dplex.eu)[See pricing](https://dplex.eu/en/pricing)