Project data is sensitive: budgets, contracting partners, team workload and decisions that are not public yet. Security is not an add-on module in Projektiassistent — it is a layer running through the whole platform, from sign-in to the project's permission level.
Most leaks do not come from a cracked password but from someone reaching data they had no business seeing. Access is checked on every request, not only at sign-in.
Session → project → permission level (Viewer, Editor, Admin). The Business plan adds role profiles per module and workspaces per organisation.
Every request verifies that the referenced resource belongs to an environment the user can access. Changing an identifier does not reach another client's data.
All traffic runs over HTTPS with enforced HSTS, behind a CDN and reverse proxy providing DDoS and WAF protection.
User-generated rich text is cleaned before display on an allowlist basis — scripts and dangerous links are stripped.
On the Business plan the audit log records the project's major changes with who made them and when, and the organisation's audit view puts significant changes, decisions, risks and approvals on one timeline. That is not only a security measure — it is also what makes audits and dispute resolution possible.
A password must be at least 8 characters with an uppercase letter, a lowercase letter, a number and a special character. Passwords are stored only as bcrypt hashes; session cookies are HttpOnly and SameSite.
Server-side rate limiting on sign-in and password reset — independent of the session, so clearing cookies does not get around it.
The project and organisation audit log and the API usage audit with limits help you monitor integrations and diagnose problems.

In the profile's "Data and privacy" section you can download a copy of all personal data stored about you and permanently delete the account with its related data yourself — not something you have to request through support.
The platform runs on a PostgreSQL database and all traffic is encrypted. A fuller description of data processing is in the privacy policy.
Yes. "Export my data" downloads a copy of all personal data stored about you, and "Delete my account" permanently deletes the account and related data after confirmation.
Only you and the people you have shared them with, within their permission level. On the Business plan a role profile can restrict modules further, and workspaces keep an organisation's projects together.
On the Business plan the audit log records the project's major changes with who made them and when, version changes can be restored, and the organisation's audit view suits compliance checks and audit preparation. The requirements of a specific regulation are still worth reviewing with your own compliance specialist.
Step-by-step instructions with the button and field names are in the user guide.
Describe the project in your own words — the AI drafts a structured plan.
→🛑Decision log, baseline and milestone approvals — who, what and when.
→🧩Break the project down: tasks, subtasks, owners and effort.
→📊Schedule, dependencies and critical path — built from your plan.
→🔀Task flow in columns — the same tasks as in the plan.
→🧭Waterfall, Scrum, Kanban, Hybrid, PRINCE2 or Simple project.
→👥Who is overloaded and who is free — before a deadline slips.
→⚠️Risk register: impact × probability, risk score and mitigation plan.
→💶Cost lines, VAT and free balance in real time — ready for reporting.
→📊A status summary for management in seconds, the document as PDF/DOCX.
→🗂️Every project on one screen — an aerial view, not a magnifying glass.
→🤝Share the project by invitation — Viewer, Editor or Admin.
→🧠Plan, tasks and summary — recommendations, what-if and notes on Business.
→🔌API tokens, webhooks, Slack, Teams and a calendar feed (Business).
→14-day free trial — no credit card required.
Start for free →