Security at a glance

This section is for your IT department and your data protection officer. It explains how the system is built and protected, and what your IT needs to allow.

Our setup follows the recommendations of the German Federal Office for Information Security (BSI), such as IT-Grundschutz and its technical guidelines for encryption.

The most important points

• Your own system. Every company gets its own, fully separate system. Nothing is shared with other customers.
• Hosted in the EU, by default in Germany.
• Protected against attacks by a web application firewall and intrusion prevention whose rules update automatically every day.
• Encrypted connections only.
• Daily vulnerability scans and security updates: our systems are checked for known vulnerabilities (CVEs) and updated automatically every day.
• Encrypted backups every night, at a separate location.
• Sign-in with your company’s Microsoft account, so your multi-factor authentication and policies apply.
• Ship PCs without passwords. Each PC has its own key, is approved by the office and can be disconnected at any time.
• Each ship receives only what is meant for it, and the crew can’t change anything.
• An assistant that answers only from your documents – no internet access, always with sources.
• Few requirements for your network: ship PCs only need outgoing HTTPS.
• Deleted when the contract ends: your whole system, including all data and backups.

Common questions are answered in the FAQ.

Contact

• Reporting a security issue: please write to security@maridex.app. We answer quickly and treat every report confidentially.
• Data processing agreement (AVV / DPA) and our technical and organisational measures (TOMs) are available on request.