Trust & security

Enterprise security for
every marketing team

Every feature we ship sits on a foundation of privacy, encryption, and compliance. This page is the behind-the-scenes look at how we keep your data safe — from infrastructure to AI processing.

Contact security team

Hosted in the EU

Production workloads run in European data centers with strict network isolation and continuous monitoring.

GDPR by design

Privacy-by-default architecture, data minimization, and clear retention policies across every workspace.

ISO 27001 certified

An independently audited Information Security Management System governs how we build and operate Content24.

Encrypted end to end

TLS in transit, AES-256 at rest, and role-scoped access so only authorized systems and people can reach your data.

Technical controls

What protects your workspace

AES-256 encryption

Stored data is encrypted at rest. Passwords use adaptive bcrypt hashing — never stored in plain text.

TLS 1.2+ in transit

Every connection between your browser, our API, and backend services runs over modern transport security.

Workspace isolation

Client and team workspaces are logically separated so data does not bleed across accounts or organizations.

Role-based access

Least-privilege permissions on production systems. Access is reviewed regularly and revoked on offboarding.

Secure development

Code review, dependency scanning, static analysis, and version-controlled releases for every production change.

Incident response

Documented procedures for detection, containment, and notification — including GDPR breach timelines.

GDPR compliance

Privacy is the default, not an add-on

Content24 is built for teams that need to move fast without cutting corners on compliance. We align with EU data protection law across product design, vendor management, and customer contracts.

Read our GDPR statement

Privacy by design and by default across all features
Data Processing Agreements available for business customers
Right to access, rectification, erasure, and portability supported
Subprocessors vetted under GDPR and ISO 27001 standards
International transfers protected by SCCs where applicable

Your data, your output

What happens when you create with AI

We do not sell your data. We do not use your prompts or generated content to train public models. Your inputs are processed to deliver your request — then handled according to your retention settings.

Your input

Prompts, files, and brand context stay scoped to your workspace.

AI processing

Models process the request in real time. Partner APIs operate under zero-retention terms where available.

Your output

Results belong to you. Export, edit, or delete — you stay in control of what gets published.

For full details on subprocessors and retention, see our Data Protection & Trust page and Privacy Policy.

Legal certainty

A Data Processing Agreement when you need one

Business customers can formalize how Content24 handles personal data with a DPA aligned to Article 28 GDPR — covering confidentiality, security measures, subprocessors, and breach notification.