Security & Compliance
Your data is safe with us
SilentShield is built from the ground up for privacy and security. No cookies, no tracking, full GDPR compliance.
Behavioral scoring
Every request gets a risk score
SilentShield condenses behavioral signals into a 0–100 value — that becomes the verdict. Example values:
Transparency
What we see — and what we never do.
Processed (pseudonymous)
- Interaction patterns (mouse, timing) as a score
- A pseudonymous session hash
- Aggregated bot statistics
Never stored
- Names, emails, or form contents
- Tracking cookies or advertising IDs
- Cross-device fingerprints
GDPR / DSGVO Compliance
SilentShield is fully compliant with the EU General Data Protection Regulation (GDPR). We do not collect, store, or process any personal data from your website visitors.
- No cookies or browser fingerprinting
- No personal data collection from end users
- No cross-site tracking or profiling
- Data processing agreement (DPA) available
- Privacy by design architecture
EU-Only Data Hosting
All data is processed and stored exclusively in European Union data centers. No data ever leaves the EU.
- Servers located in Germany
- No data transfer to third countries
- EU-based infrastructure providers
- Compliant with EU data sovereignty requirements
Encryption & Transport Security
All communication is encrypted in transit and at rest using industry-standard protocols.
- TLS 1.3 for all API connections
- HSTS with includeSubDomains and preload
- Strict security headers (CSP, X-Frame-Options, X-Content-Type-Options)
- Encrypted database storage
Access Control & Authentication
Multi-layered access control protects your account and API keys.
- Secure API key authentication
- Role-based access control for teams
- Account lifecycle management with automatic suspension
- Email verification required for all accounts
DDoS & Abuse Protection
Built-in protection against denial-of-service attacks and API abuse.
- Per-IP rate limiting on all endpoints
- Per-API-key monthly quotas
- Automatic abuse detection and blocking
- Cloudflare integration for edge protection
Accessibility (WCAG 2.1)
SilentShield is designed to be fully accessible and inclusive for all users.
- No visual challenges or puzzles
- Screen reader compatible
- Keyboard navigation support
- Inclusive by design — no user is excluded
Data Retention & Deletion
We follow strict data retention policies with automatic cleanup and user-controlled deletion.
- Configurable data retention periods per plan
- Automatic deletion of expired behavior data
- Account deletion with full data anonymization
- Unverified accounts auto-deleted after 7 days
Questions about security?
Our team is happy to discuss security requirements for your use case.