ISO-certified security — your data, secured in layers
A media vault is only as good as its safeguards. That's why your data lives exclusively in Germany, behind clearly governed access — and, on request, secured three times over.
- GDPR-compliant
- Server location Germany
- ISO/IEC 27001
- BSI C5:2020
- TISAX
Audited independently, not just promised
Security can be claimed — or proven. VAULO relies on certified infrastructure and has its own architecture audited regularly by independent parties.
Certified data centres
Customer data lives exclusively in a Microsoft Azure data centre in Frankfurt — certified to ISO/IEC 27001, BSI C5:2020 and TISAX.
Regular penetration testing
VAULO has its own security architecture audited regularly through independent penetration tests — including on behalf of the Bayerische Staatsregierung.
Allianz für Cyber-Sicherheit
VAULO is a participant in the Allianz für Cyber-Sicherheit — the initiative run by the German Federal Office for Information Security (BSI).
Software Made in Germany
Awarded the seal of the Bundesverband IT-Mittelstand — developed in Munich, operated in Germany.
Exclusively in Germany
Your media lives in a Microsoft Azure data centre in Frankfurt — on request, redundant with Berlin and with an additional on-site backup. A data processing agreement backs the GDPR-compliant processing legally.
99.997%
Uptime in production
Last 90 days (as of 23 Aug 2026)
Who sees what is your decision
Roles and access rights
Administrators decide individually who may view, edit, download or share content — per area, per role, per person.
Controlled shares
Password-protected, time-limited shares put media exactly in the hands of the people they're meant for — and no one else.
Restrictions and usage notes
Usage rights and embargo dates sit on the asset itself — the system warns before a protected image takes the wrong path.
Your data stays your data
The AI features are fully opt-in: you, as the administrator, decide whether they're switched on. Your content is never used for training purposes — and the VisionFace facial recognition runs exclusively on VAULO's own servers, with no external AI provider.
Frequently asked questions
Where is my data stored?
Exclusively in Germany — in a Microsoft Azure data centre in Frankfurt, on request redundant with a second location in Berlin.
Is VAULO GDPR-compliant?
Yes. VAULO processes personal data in line with the General Data Protection Regulation; a data processing agreement backs that up legally.
Is my data used for AI training?
No, never. The AI features are opt-in, and VisionFace runs entirely on VAULO's own servers — with no external AI provider.
How is security audited?
Through regular independent penetration tests — including on behalf of the Bayerische Staatsregierung — and as a participant in the BSI's Allianz für Cyber-Sicherheit.
Discuss security in detail
Compliance requirements are individual. In a conversation we go through your requirements — from the data processing agreement to the backup concept.