Security at cofenster: ISO 27001, GDPR and the EU AI Act
Video carries faces, voices and internal information. That is why security is the standard for every feature and every AI Video Agent at cofenster, not an add-on.
The essentials at a glance
ISO/IEC 27001:2022 certified
Audited every year by DQS, an independent certification body. The certificate covers how cofenster develops and delivers its software.
GDPR compliant, hosted in Germany
Your data is hosted on AWS in Frankfurt, Germany, with daily backups in the EU. All data is encrypted in transit and at rest.
Aligned with the EU AI Act
Our AI features are developed by cofenster and aligned with the requirements of the EU AI Act. Scripts, storyboards and clip selection are processed through Amazon Bedrock in the EU.
We don't train AI on your content
cofenster trains no AI models of its own, so your videos, recordings and texts are never used by us for AI training.
Consent built into the product
Before a recording, cofenster collects the digital consent of the people on camera and stores it in the project. Your legal basis is documented without paperwork.
AI your works council can follow
With Ella, real employees record themselves and give consent inside the workflow. Brand Templates can add a visible AI label to every AI generated video, so disclosure under Article 50 of the EU AI Act happens automatically, not by memory.
For your IT team
- Single sign-on (SSO) through your identity provider
- Roles and permissions control who can see and edit what
- A published list of domains to allow in your firewall
Documents for privacy and procurement
Our data processing agreement (DPA, German: AVV), ISO 27001 certificate and security documentation are available on request. Contact us and we send the current versions.
Who is responsible
cofenster GmbH, Steinhöft 9, 20459 Hamburg, Germany. External data protection officer: Simply Legal GmbH.
Frequently asked questions
Where is our data stored?
On AWS servers in Frankfurt, Germany, with daily backups in the EU. All data is encrypted in transit and at rest.
Is cofenster ISO 27001 certified?
Yes. cofenster is ISO/IEC 27001:2022 certified and audited every year by DQS.
Does cofenster use our videos to train AI?
No. cofenster does not train or fine-tune AI models, so we never use your content for training.
Is cofenster aligned with the EU AI Act?
Yes. Our AI features are developed by cofenster and aligned with the EU AI Act, and Brand Templates can label AI generated video automatically.
Can we get a data processing agreement?
Yes. Contact us and we send our current DPA (AVV) and security documentation.