You store business data and your partners’ contacts in Inventio. This is how we protect them — we only state what we can back up.
Updated: October 2026
The application runs on hosting provided by WebSupport s.r.o. Servers are located in the Perpetuus data centre in Bratislava; backups are stored separately in another data centre, also in Bratislava. Everything stays in Slovakia, within the EU.
Physical access to the data centre is limited to authorised staff. The facility has entry control, motion detection, fire alarms, smoke and water detection, fire suppression and 24/7 security guards.
Websupport is subject to Slovak Act No. 69/2018 on Cybersecurity, and compliance is regularly reviewed in cybersecurity audits.
Communication between your browser and the application is encrypted (HTTPS, TLS 1.2 and 1.3; TLS 1.0 and 1.1 are disabled). The certificate renews automatically.
The infrastructure is protected by a web application firewall (WAF) and DDoS protection, and is monitored around the clock by the provider’s operations team.
Customer accounts on the server are technically isolated from each other (PHP-FPM, restricted file access). Server access is encrypted only (SFTP, SSH).
Each company (workspace) has its own separate space and its users see only their own data. Role-based access: the owner manages the team, editors work with data, the view-only role changes nothing.
Passwords are stored only as a one-way hash, never in readable form. After repeated failed attempts, logins from that address are temporarily blocked.
The database and uploaded files are not reachable directly from the web. Forms are protected against forged requests (CSRF) and important actions are recorded in the activity log.
The host backs up all files once a day to a different data centre and keeps backups for 14 days.
Inventio additionally creates its own consistent copy of the database every day (even while it is in use) and keeps it for 14 days. The administrator can download it and store it outside the hosting.
The whole database or individual files can be restored to a selected day.
Analyses, company maps, signals and draft texts are prepared by the Claude AI model via the API of Anthropic, PBC (USA). Under Anthropic’s commercial terms, content sent through the API is not used to train models, and inputs and outputs are deleted within 30 days.
The AI receives only the material needed for a specific task — never the whole database. Every AI run is logged and a monthly limit can be set for each company.
AI results are suggestions: contacts, notes and texts are confirmed by a person. Web research only accepts links that were actually found.
For the personal data of your business partners, you are the controller and Cube Capital s.r.o., which operates Inventio, is the processor. We sign a data processing agreement with you under Art. 28 GDPR.
You can export your data at any time (CSV, directly for Raynet, Pipedrive or HubSpot). When we part ways, we delete it on request.
| Company | Purpose | Location of processing |
|---|---|---|
| WebSupport s.r.o., Bratislava | hosting of the application, database and backups, e-mail | Slovakia (EU) |
| Anthropic, PBC, San Francisco | AI processing (Claude model) | USA — under the provider’s data processing addendum |