As a European company, we value your privacy and are committed to protecting it. Data protection isn't just a legal requirement for us—it's a core value that shapes how we build and operate Capacities.
You can read about our principles here.
Capacities is fully GDPR compliant. The General Data Protection Regulation in the European Union represents some of the world's strongest data protection laws, and we extend these protections to all our users globally—not just those in the European Union.
We've built Capacities around six core principles that ensure your data remains secure, private, and under your control:
We write in detail about these principles and the underlying security architecture in our data protection memo.
Data Processing Agreement
A Data Processing Agreement (DPA) (German: Auftragsverarbeitungsvertrag, AVV) is a legally binding contract for business customers who use Capacities to process personal data under regulations like GDPR.
Data Protection and Security
Some of you save very personal information, like medical information or journals in Capacities, while others work with important data from their company.