Security that is on by default
Project data is sensitive: budgets, contracting partners, team workload and decisions that are not public yet. Security is not an add-on module in Projektiassistent — it is a layer running through the whole platform, from the request level to the audit log.
Four levels, not one password
Most leaks do not come from a cracked password but from someone reaching data they had no business seeing. Access is checked on every request, not only at sign-in.
Layered access control
Session → project → module → organisation. Four levels of checks keep the right information with the right people.
Tenant separation
Every request verifies that the referenced resource belongs to an environment the user can access. Changing an identifier does not reach another client's data.
Encrypted transport
All traffic runs over HTTPS with enforced HSTS, behind a CDN and reverse proxy providing DDoS and WAF protection.
Content sanitisation
User-generated rich text is cleaned before display on an allowlist basis — scripts and dangerous links are stripped.
Every action leaves a trace
The audit log records all activity with a timestamp, an actor and a description. That is not only a security measure — it is also what makes audits and dispute resolution possible.
- Passwords and sessions
Passwords are stored only as bcrypt hashes. Session cookies are HttpOnly and SameSite; the session ID is rotated on sign-in and on password change.
- Brute-force protection
Server-side rate limiting on sign-in and password reset — independent of the session, so clearing cookies does not get around it.
- Audit log and API log
All activity and API requests are logged, which makes monitoring integrations and diagnosing problems possible.
Your data stays yours
Exporting your data in a machine-readable format and permanently deleting the account are available to the user directly — not something you have to request through support.
Frequently asked questions
Where is the data stored?
The platform runs on a PostgreSQL database and all traffic is encrypted. A fuller description of data processing is in the privacy policy.
Can I get my data out?
Yes. Under GDPR a user can download all their personal data in a machine-readable format and, if they wish, permanently delete the account together with its associated data.
Who can see my projects?
Only you and the people you have shared them with. In Business-plan workspaces, data is additionally separated per workspace.
Is the audit log sufficient for compliance?
The audit log records every action with a timestamp, an actor and a description, and plan versions can be restored. The requirements of a specific regulation are still worth reviewing with your own compliance specialist.
What Projektiassistent does for you
Project plan generator
Describe the project in your own words — the AI drafts a structured plan.
→🛑Decision readiness
The system tells you what is still missing for a decision.
→🧩Tasks and work breakdown
Break the project down: tasks, subtasks and a WBS.
→📊Gantt chart
Schedule, dependencies and milestones — generated from your plan.
→🔀Kanban board
Task flow in columns — tied to the plan, not a separate list.
→🧭Methodologies
Scrum, Kanban, Waterfall, PRINCE2, hybrid or simple project.
→👥Resource planning
Who is overloaded and who is free — before a deadline slips.
→⚠️Risk analysis
Risk register, impact–probability matrix and mitigations.
→💶Project budget
Cost lines, VAT and free balance in real time — ready for reporting.
→📊Reporting
A status report for management in seconds, not hours.
→🗂️Project portfolio
Every project on one screen — an aerial view, not a magnifying glass.
→🤝Team collaboration
Share the project, set permissions, keep data separated.
→🧠AI project manager
Chat, recommendations, what-if and meeting notes in one.
→🔌Integrations
REST API, webhooks, Slack, Teams and calendar.
→Try a secure project environment
14 days free — all Pro features, no card required.
Start for free →