Security and GDPR, by design
Docplume is EU-hosted and built for GDPR from the ground up. Here is how your documents are protected, who can reach them, and where they live.
EU hosting
Everything — the application, the database and your document files — is hosted in Hetzner’s German region. Your data never leaves the EU.
Encryption
Traffic is encrypted in transit with TLS, and document files are encrypted at rest in object storage. Download links are short-lived and signed.
Access control
Folder-level permissions for users, groups and roles decide who can view, edit or manage. A document in a folder you cannot see is invisible — it never surfaces in search or listings.
Audit trail
Every meaningful action — uploads, edits, downloads, shares, permission changes, deletions — is recorded with who and when, filterable and exportable to CSV.
Backups you own
The optional backup add-on writes a downloadable daily archive of everything, with a manifest you can verify offline. Losing access to Docplume never means losing your data.
GDPR
EU hosting, a signed Data Processing Agreement, a documented list of sub-processors and documented retention make Docplume straightforward for a GDPR-conscious organisation to adopt.
Sub-processors
The third parties Docplume relies on to run the service. This is the operational list; the full, legally-binding register is the group-wide document linked below.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Object storage for document files | Germany (EU) |
| Hetzner Online GmbH | Application hosting and the MySQL database | Germany (EU) |
What is kept, and for how long
Fixed, documented rules for recovering from mistakes. Check them against the rules you work under; this is not legal advice.
Deleted documents
Stay in Trash for 30 days, where whoever deleted them can restore them. Then they are deleted for good.
Versions
Every version of a document is kept for as long as the document exists. Restoring an old version adds it on top; history is never rewritten.
A cancelled account
Stays readable and downloadable for 60 days after the subscription ends. Then everything is deleted.
The legal documents
The Terms of Service, the Data Processing Agreement and the full sub-processors register are the shared rodnet.ai documents linked in the footer. Docplume never writes its own.