Trust Center

Built for public accountability. Hosted in Germany. Documented for audit.

URBNIA is built for cities, municipalities and regions that answer to councils, auditors and residents. This page shows where we host your data, how we protect it, how our AI works, and which documents your organisation can request.

Trust documentation

Everything your procurement and audit teams ask for.

Customers receive the following documents on request, tailored to their hosting option and modules.

  • Available on request

    Service Level Agreement

    Availability, support hours, response times and service credits.

  • Available on request

    Data Processing Agreement

    Our commitments as your processor under Article 28 GDPR.

  • Available on request

    Technical and Organisational Measures

    How we secure systems, access, backups and operations.

  • Available on request

    Subprocessor List

    Every service provider involved, with location and purpose.

  • Available on request

    General Terms and Conditions

    The contractual terms of your URBNIA licence.

  • Available on request

    AI Processing Description

    Which AI components your tenant uses, what they receive and how long they keep it.

  • Available on request

    Retention and Deletion Schedule

    How long each kind of data is kept and when it is deleted.

  • Available on request

    Exit and Data Export

    How and in which formats you receive your data when your contract ends.

  • Available on request

    Incident Notification

    How and when we inform you about security incidents and personal data breaches.

  • Available on request

    Accessibility Conformance Report

    How URBNIA meets EN 301 549 and WCAG for the services you offer residents.

  • Available on request

    Backup and Business Continuity Summary

    Backup frequency, recovery targets and how we test restores.

Hosting and data location

Your data stays in Germany.

  • Hosted in Germany

    URBNIA Cloud application data and encrypted backups are stored in an IONOS Cloud data centre in Berlin.

  • Operated by Mycel

    Every URBNIA Cloud environment is operated, maintained and updated by Mycel UG (haftungsbeschränkt) in Berlin.

  • Three hosting options

    Community on shared URBNIA Cloud, Enterprise on dedicated infrastructure, or Community self-hosted on your own servers.

  • EU jurisdiction

    URBNIA Cloud infrastructure is located in Germany and operated under German and EU law. Our safeguards against unlawful third-country access are described in the TOMs.

Security in the platform

Protection built in, not bolted on.

These controls are part of URBNIA Indus today.

  • Multi-factor sign-in and SSO

    Time-based one-time codes and single sign-on with your identity provider; fresh sign-in for privileged actions.

  • Tenant isolation

    Each municipality is isolated at the database level, and the application runs with a role that cannot bypass those rules.

  • Encryption

    TLS for all traffic, and AES-256-GCM encryption for sensitive fields at rest.

  • Tamper-evident audit trail

    Governance actions are chained and anchored with Ed25519 signatures from an isolated signing service.

  • Malware scanning

    Every uploaded file is scanned before it is stored.

  • Encrypted backups

    Coordinated encrypted backups at least every 24 hours, integrity-checked and tested with restore drills.

  • Separation of duties

    Scoped roles, reviewer conflict declarations, quorum and immutable decisions keep privileged work explicit.

  • Privacy rights built in

    Residents can submit anonymously and exercise their data rights through a dedicated request route.

AI you can account for

Every algorithm explained. Including our own.

  • Indus uses no generative AI

    Risk classification runs on a versioned, published ruleset on our own servers. Results cite their source and require human confirmation.

  • No outside AI providers in Indus

    Indus sends no customer data to external AI services.

  • Upcoming modules: EU only

    URBNIA Wise and Civ.AI are designed to run self-hosted or on a sovereign EU cloud, configured per customer.

  • People approve the result

    In Wise, answers cite their sources and a person approves before anything leaves the building. Every agent is registered in URBNIA Indus.

Product status

Where each module stands today.

ModuleStatusHow it is offered
URBNIA IndusPrivate previewURBNIA Cloud Community, Enterprise, or self-hosted
URBNIA DataSpacePrivate previewPilots by arrangement
URBNIA WisePrivate previewPilots by arrangement
URBNIA Civ.AIPrivate previewWorkshops by arrangement
URBNIA LOOPOpen-source lab demoOpen protocol and public demo

Need documents for procurement or audit? Request them in one form.

Request documentation