Your workplace data,
protected by design
ISO 27001 and ISO 42001 certified, hosted in the European Union, and never sold or used for advertising or model training. The same protection on every plan.
ISO 27001
Certified
ISO 42001
Certified
GDPR & KVKK
Compliant
EU Hosted
Amsterdam & Frankfurt
Four layers of protection
Security isn't a feature, it's our foundation. Every layer of the Links platform is designed with defense in depth.
Encryption Everywhere
All traffic between devices, apps and our servers is encrypted with TLS. Passwords are stored only as one-way hashes, and device credentials can be revoked at any time.
Access Control
Role-based access control with granular permissions. Sign-ins and security events are logged for review.
Data Isolation
Each workspace operates in a logically isolated environment. Your spaces, bookings, people and assistant conversations are separated from other customers.
Full Audit Trail
Security-relevant activity in your workspace is recorded, so administrators can see who signed in and what changed.
Compliance you can verify
Links meets recognised international standards. Request audit reports, DPAs, and compliance documentation at any time.
ISO 27001
CERTIFIEDOur information security management system is certified against the international standard for protecting information systematically.
ISO 42001
CERTIFIEDOur AI management system is certified for the responsible development and operation of AI features, including our workplace assistant.
GDPR
COMPLIANTPersonal data is processed in line with the EU General Data Protection Regulation. Data Processing Agreements are available for customers.
KVKK
COMPLIANTPersonal data is processed in line with the Turkish Personal Data Protection Law No. 6698.
SOC 2 Type II
PLANNEDAn independent SOC 2 Type II audit of our security, availability and confidentiality controls is planned.
Built on world-class infrastructure
Links runs in EU data centres in Amsterdam and Frankfurt, set up for reliability, performance and security.
Cloud Infrastructure
Hosted in the European Union: application and database in Amsterdam, real-time and device services in Frankfurt.
Redundant Storage
Databases are backed up automatically on a regular schedule and backups are kept in the EU.
Disaster Recovery
Documented recovery procedures for restoring service and data from backups.
High Availability
Continuous monitoring and a public status page. Service levels can be agreed in enterprise contracts.
DDoS Protection
Traffic passes through Cloudflare for DDoS mitigation, with rate limiting on sign-in and sensitive endpoints.
24/7 Monitoring
Automated monitoring and alerting track infrastructure health and application errors around the clock.
AI you can trust
Our commitment to responsible AI goes beyond compliance. These principles apply to every Links feature, including our workplace assistant.
No Training on Your Data
Your conversations, documents, and business data are never used to train our AI models. Your data stays yours.
Transparent Agent Behavior
Assistant conversations are kept in your workspace history, so you can see what was asked and what was answered.
Data Retention Controls
Organisations decide how long reservation data is kept, and data is deleted or anonymised when it is no longer needed.
Human-in-the-Loop
Actions that change bookings or spaces are confirmed by a person. Administrators decide which features the assistant can use.
Continuous security cadence
Security isn't a one-time checkbox. Our operations team runs on a disciplined cadence of testing, auditing, and improvement.
Error Monitoring
Application errors are tracked and triaged
Dependency Updates
Third-party packages are reviewed and updated
Access Reviews
Review and revoke unnecessary permissions
Penetration Testing
Independent third-party penetration test
SOC 2 Audit
Independent audit of controls and processes
Enterprise-grade security features
For organizations that need advanced controls, dedicated infrastructure, and hands-on compliance support. Available on our Enterprise plan.
Talk to SalesSingle Sign-On (SSO)
Microsoft 365 and Google Workspace
Custom DPA
Tailored Data Processing Agreement for your legal team
Penetration Testing
Independent third-party testing is planned
EU Data Residency
Customer data stored in Amsterdam and Frankfurt
Security Questionnaires
We answer customer security reviews on request
ISO Certificates
ISO 27001 and ISO 42001 certificates on request
Common security questions
Where is my data stored?
Customer data is stored in the European Union. The application and database run in Amsterdam, the Netherlands, and real-time and device services run in Frankfurt, Germany.
Do you use my data to train AI models?
No. We never use customer data, conversations, or uploaded documents to train, fine-tune, or improve our AI models. Your data is used solely to provide the service you've configured.
What happens if the assistant makes a mistake?
Changes the assistant proposes to bookings or spaces are confirmed by a person before they are applied, and conversations stay in your workspace history, so you can review what happened.
Which certifications do you hold?
Links holds ISO 27001 and ISO 42001 certifications. An independent SOC 2 Type II audit is planned. Certificates are available on request from [email protected].
How do I report a security vulnerability?
Please report vulnerabilities to [email protected]. We acknowledge reports promptly, investigate every report and prioritise critical issues.
Do you support on-premise deployment?
Links is delivered as a cloud service hosted in the European Union. Enterprise requirements for dedicated or on-premise hosting are discussed case by case with our team.
Questions about security?
Our security team is happy to answer your questions, walk through our practices, or provide compliance documentation for your review.