# Security

Last updated: July 2026

Clarvelo is designed for teams that run collaborative workshops and may handle confidential plans, participant contributions, and AI-generated summaries. This page describes our security posture at a high level.

## Hosting and infrastructure

The service is hosted in the EU (Germany). We apply security controls across our application and infrastructure and limit access according to operational need.

## Encryption

We use TLS to protect data in transit and encryption at rest.

## Access controls

User access is controlled by account authentication and workspace membership. We enforce MFA for administrative access and apply least-privilege access controls.

## Application security

We use CSRF protection, secure session management, server-side authorisation checks, secure browser headers, and least-privilege access controls. Security-sensitive changes are reviewed before deployment where practical.

## Monitoring and incident response

We monitor for errors and security-relevant events. We maintain an incident response process and notify affected customers as required by law.

## Vendor and subprocessor management

We use subprocessors for hosting, email, billing, AI, and other operational services. We review providers for security and data-protection suitability before use and list material subprocessors on the Subprocessors page.

## AI data handling

Customer content is sent to AI providers only to provide requested AI features. AI providers and further data-handling information are listed on the Subprocessors page.

## Vulnerability reporting

Please report suspected vulnerabilities to support@clarvelo.com. Include enough detail to reproduce the issue. Do not access, modify, delete, or exfiltrate other users’ data while testing.

## Compliance

Clarvelo is not currently claimed to be ISO 27001, SOC 2, or otherwise externally certified unless a certification is listed here. We design our processes with GDPR requirements in mind, but this page is not a certification statement.

---

[Clarvelo](https://clarvelo.com) is an AI workshop facilitator for collaborative teams.