Security & Compliance
Your data is safe with us
SilentShield is built from the ground up for privacy and security. No cookies, no tracking, full GDPR compliance.
Behavioural measurement
How sure we are on every request
SilentShield condenses behavioural signals into a value between 0 and 1 — the verdict follows from it. The higher the value, the more confidently the visitor is a human. Example values:
Transparency
What we see — and what we never do.
Processed (pseudonymous)
- Interaction patterns (mouse, timing) as a score
- A pseudonymous session hash
- Aggregated bot statistics
Never stored
- Names, emails, or form contents
- Tracking cookies or advertising IDs
- Cross-device fingerprints
GDPR Compliance
SilentShield is fully compliant with the EU General Data Protection Regulation (GDPR). We do not collect, store, or process any personal data from your website visitors.
- No cookies or browser fingerprinting
- No personal data collection from end users
- No cross-site tracking or profiling
- Data processing agreement (DPA) available
- Privacy by design architecture
EU-Only Data Hosting
All data is processed and stored exclusively in European Union data centers. No data ever leaves the EU.
- Servers located in Germany
- No data transfer to third countries
- EU-based infrastructure providers
- Compliant with EU data sovereignty requirements
Encryption & Transport Security
All communication is encrypted in transit and at rest using industry-standard protocols.
- TLS 1.3 for all API connections
- HSTS with includeSubDomains and preload
- Strict security headers (CSP, X-Frame-Options, X-Content-Type-Options)
- Encrypted database storage
Access Control & Authentication
Multi-layered access control protects your account and API keys.
- Secure API key authentication
- Role-based access control for teams
- Account lifecycle management with automatic suspension
- Email verification required for all accounts
DDoS & Abuse Protection
Built-in protection against denial-of-service attacks and API abuse.
- Per-IP rate limiting on all endpoints
- Per-API-key monthly quotas
- Automatic abuse detection and blocking
- Cloudflare integration for edge protection
Accessibility (WCAG 2.1)
SilentShield is designed to be fully accessible and inclusive for all users.
- No visual challenges or puzzles
- Screen reader compatible
- Keyboard navigation support
- Inclusive by design — no user is excluded
Data Retention & Deletion
We follow strict data retention policies with automatic cleanup and user-controlled deletion.
- Configurable data retention periods per plan
- Automatic deletion of expired behavior data
- Account deletion with full data anonymization
- Unverified accounts auto-deleted after 7 days
Questions about security?
Our team is happy to discuss security requirements for your use case.