Security

Last updated: July 2026

Clarvelo is designed for teams that run collaborative workshops and may handle confidential plans, participant contributions, and AI-generated summaries. This page describes our security posture at a high level.

Hosting and infrastructure

The service is hosted in the EU (Germany). We apply security controls across our application and infrastructure and limit access according to operational need.

Encryption

We use TLS to protect data in transit and encryption at rest.

Access controls

User access is controlled by account authentication and workspace membership. We enforce MFA for administrative access and apply least-privilege access controls.

Application security

We use CSRF protection, secure session management, server-side authorisation checks, secure browser headers, and least-privilege access controls. Security-sensitive changes are reviewed before deployment where practical.

Monitoring and incident response

We monitor for errors and security-relevant events. We maintain an incident response process and notify affected customers as required by law.

Vendor and subprocessor management

We use subprocessors for hosting, email, billing, AI, and other operational services. We review providers for security and data-protection suitability before use and list material subprocessors on the Subprocessors page.

AI data handling

Customer content is sent to AI providers only to provide requested AI features. AI providers and further data-handling information are listed on the Subprocessors page.

Vulnerability reporting

Please report suspected vulnerabilities to support@clarvelo.com. Include enough detail to reproduce the issue. Do not access, modify, delete, or exfiltrate other users’ data while testing.

Compliance

Clarvelo is not currently claimed to be ISO 27001, SOC 2, or otherwise externally certified unless a certification is listed here. We design our processes with GDPR requirements in mind, but this page is not a certification statement.

Clarvelo is an AI workshop facilitator for collaborative teams.