Skip to content

FeaturesSecurity & privacy

SECURITY & PRIVACY

Secure by default. Private by design.

EU-hosted, GDPR-ready and hardened against the attacks news sites see every day.

01 — CONSENT THAT WORKS

Nothing loads until readers say yes.

Third-party scripts stay blocked until the reader accepts, and the platform itself sets no tracking cookies.

  • Granular consent choices
  • Scripts blocked until consent
  • GDPR tools for reader data

WHERE PROTECTION SHOWS UP

Four moments where security is doing its job.

From the first cookie banner to the staff login, this is what readers and editors actually see.

  • Consent banner

    Granular choices; scripts stay blocked until yes.

  • Login protection

    Captcha, rate limiting and automatic lockouts.

  • Roles and permissions

    Access set per module, for every staff role.

  • EU data residency

    Hosted in Frankfurt, with failover in Bucharest.

WHAT IS PROTECTED

Covered from the cookie banner to the database.

Scripts blocked until consent

Third-party scripts wait for the reader to say yes.

No tracking cookies from us

The platform itself sets no tracking cookies.

Lockouts and rate limiting

Repeated failed logins lock the account automatically.

Captcha of your choice

Google reCAPTCHA or Cloudflare Turnstile.

Hardened core

Protection against CSRF, XSS and SQL injection.

Enterprise controls

SSO/SAML, audit logs and a 99.9% uptime SLA on Enterprise.

02 — LOGIN PROTECTION

Keep attackers out of your admin.

Rate limiting, automatic lockouts, strong password rules and a captcha of your choice protect every account.

  • Google reCAPTCHA or Cloudflare Turnstile
  • Automatic lockouts after failed attempts
  • Configurable password rules

03 — ROLES AND PERMISSIONS

Everyone gets exactly the access they need.

Create staff roles and choose which parts of the admin each one can use, down to individual modules.

  • Custom roles per module
  • Moderator and editor presets
  • SSO and audit logs on Enterprise

Also included

EU data residency

Hosted in Frankfurt and Bucharest, with a DPA available without a procurement battle.

Hardened core

Protection against CSRF, XSS and SQL injection.

Spam control

Block known abusers by email and add "nofollow" to links in reader content.

Enterprise controls

SSO/SAML (Okta, Azure AD, Google Workspace), audit logs and a 99.9% uptime SLA.

See it working today.

A real demo you can click through, not a slide deck. Public pricing from €100 per month.

Open the live demoBook a 30-min call
See pricing and comparison →