Security and compliance

XLeap's processes, software and cloud deployments are hardened and continuously improved to protect the

Confidentiality
Integrity
Availability

of the solution and their data.

Auditable events are logged while maintaining the anonymity of contributions. Enterprise class authentication requirements including SSO and multi-factor authentication can be enforced administratively.

The XLeap software service is rendered under a shared responsibility model between AWS or OTC (as applicable), XLeap and the customer.

Certifications

Development and provisioning of the XLeap Software and the XLeap Software Service are certified to meet the requirements of ISO/IEC 27001:2022. Certificate DE016815 is valid through 09 August 2029.

The XLeap solution is well architected and has been approved in an AWS Foundational Technology Review.

Regional Hosting and data residency

XLeap Cloud deployments leverage Amazon Web services (AWS) and the Open Telekom Cloud (OTC), two of the most comprehensive, highly available and secure data services available today.

AWS certifications and audits include: AICPA SOC 1 - 3, PCI DSS Level 1, ISO 27001, FedRAMP, FISMA Moderate.
OTC certification and audits include: TISAX Level 3, BSI C5 Type II, BSI KRITIS, SOC 1 - 3, GxP, DIN EN 50600.

Deployment regions:

Customers from the Americas are served from AWS California or Virginia
European, UK, and African customers are served from OTC Magdeburg, AWS Dublin, or AWS Stockolm
Asian customers are served from AWS Dublin or Singapore

Artificial Intelligence

XLeap includes technical functionality which enables the use AI in XLeap sessions. The use of AI with XLeap is controlled by

the Customer's Center administrators who permit use of a specific AI with XLeap.
the Hosts who use AI in their sessions.

Disclaimer: The confidentiality of information that is shared with the AI service rests with the XLeap customer and the provider of the relevant AI service. Not XLeap.

Contact