Security & data residency

Your bid never leaves the EU.

Confidential pricing is the most sensitive thing you’ll put in Steinlog — so the whole system is EU-pinned, and built to keep your data yours.

Trust shelf Posture · last reviewed 2026·06·20

Data residency

EU-pinned

Database · file storage · real-time · logs · AI inference

Model training

Never on your data

AI scoped to a single bid; EU-resident inference

Isolation

Row-level security

Competing bidders hard-isolated · graded, opt-in inside a consortium

Integrity

Hash-chained · attributed

Append-only; sealed with a qualified timestamp at submission

Signatures

eIDAS AdES / QES

Tier computed per notice, never defaulted

Certification

ISO 27001 — on track

DPA + subprocessor list before any real bid data

Honest posture: the log is tamper-evident, not tamper-proof — the legally-probative claim attaches to the timestamped, signed package. A full DPA and subprocessor list will be published before any real bid data is processed.