Engineering-Grade
Security.
We understand that when you process thousands of rows, security is not a "nice to have"—it is a hard requirement.
Core Philosophy
Our architecture is built on a Zero Data Retention policy for AI processing. We are the factory, not the owner of your materials.
"It's Your Data"
We act solely as a secure connection to the AI provider. We do not mark up tokens, and we do not act as a "reseller" that obfuscates the data flow.
No Model Training
We do NOT use your product data, your prompts, or your generated outputs to train our own models. Period.
Bring Your Own Key (BYOK)
By using your own API key, you bypass consumer-grade terms and benefit directly from OpenAI's Enterprise Business Terms, which explicitly state they do not train on API data by default.
Strict Data Isolation
We enforce strict data separation at the database level. You can strictly only access data that belongs to your unique account.
API Key Safety
We treat your API keys with the highest level of scrutiny. They are the keys to your intelligence engine, and we guard them accordingly.
Industry Standard Encryption
User API keys are encrypted using robust AES encryption before being stored. They are never stored in plain text.
Invisible Keys
We designed our system so that we cannot see your API keys. They are decrypted only when you trigger a request.
Client-Side Masking
Keys are never returned fully visible to the client-side browser. We only show the last 4 digits (e.g., sk-...4812).
Usage Isolation
Your key is strictly isolated to your organization's requests. We do not pool keys across users.
World-Class Infrastructure
We rely on certified providers to secure your data. We do not manage physical servers in a basement.
Processor & Compliance Map
| Google Cloud | Hosting | SOC 2 / ISO 27001 |
| Supabase | Database & Auth | SOC 2 Type II / HIPAA |
| OpenAI | AI Processing | SOC 2 Type II |
| Paddle | Payments | PCI DSS Level 1 |
Encryption in Transit
All data transmission between your browser, our servers, and external APIs is fully encrypted via secure HTTPS (TLS 1.2+) connections.
Encryption at Rest
All project data stored in our database is securely encrypted using industry-standard protocols to ensure your information remains safe on disk.
100% In-House Engineering
All code is developed by our core team. We do not outsource core infrastructure development to agencies, minimizing the risk of supply chain attacks.
GDPR Compliance
conbase.ai is committed to GDPR compliance. We ensure that your data rights are respected and our infrastructure adheres to EU standards.
- Data Processing Addendum (DPA): Available for Enterprise.
- Right to Erasure: Instant account deletion available.
- EU Hosting: Primary DB hosted in AWS Frankfurt (EU).
Vulnerability Reporting
We welcome responsible disclosure of security vulnerabilities. We will happily acknowledge researchers who submit valid, non-trivial reports.
Note: We do not offer monetary bounties at this time, but we value your contribution to our security posture.
Schedule a deep dive into conbase.ai.
de
Skaliere deine Content-Produktion ohne zusätzliches Personal
Lerne, wie du Content-Workflows skalierst – ohne Qualitätsverlust. Generiere, übersetze und optimiere Content auf Masse – egal ob 50 oder 1.000+ Zeilen, effizient und reproduzierbar.
Daniel Manco
Founder & CEO
Product
Use Cases
Resources
Company
Legal
© conbase.ai. All rights reserved.