GDPR-native retention
Configurable retention per data category, automated deletion, and anonymization wherever legal or audit obligations require records to remain.
Trust & Security
Trust is the feature we build first.
Student governments handle money, mandates and personal data. sideKIC is engineered so compliance isn't an afterthought — it is the architecture.
Compliance pillars
Enforced at the database level
These controls are guaranteed by the platform itself, not by a policy document.
Data subject rights
Access, rectification, erasure, restriction, portability and objection — every request carries its own append-only timeline.
Append-only audit ledger
Financial requests, reports, document access and meeting events are append-only at the database level. Nothing can be silently edited.
Private, encrypted storage
Documents and receipts live in a private S3 bucket with all public access blocked — served only through short-lived pre-signed URLs.
Statutory retention
Billing ledgers are locked by German bookkeeping law (§147 AO / §257 HGB) and retained unaltered for ten years.
Tenant isolation
Every query is scoped to the caller's university. A client-supplied ID can never widen access to another tenant's data.
Data residency
Where your data lives
Four subprocessors, transparently recorded in the platform's own subprocessors registry.
- eu-central-1
Amazon Web Services (S3)
Documents, receipts, reports, backups and media
- EU region
Neon
Managed PostgreSQL database
- EU region
Neon Auth
Authentication, sessions and transactional email
- EU region
Render
Application hosting
Security controls
Operational controls
- Rate-limited public endpoints
- Short-lived pre-signed URLs for file access
- Role-scoped authorization on every request
- Security-incident lifecycle with an append-only timeline
- Audited exports for every subprocessor-registry change
- Automated retention runs mirrored to the audit ledger
See the controls in action
Book a 15-minute briefing and we'll walk your data-protection officer through the architecture.
Request Demo