Trust & data residency

Your data is safe, and it stays in Europe

Security is not a feature we added — it is how tag.vu is built. Sovereign hosting, strong encryption, un-clonable tags, and a privacy-first model that keeps people reachable without exposing them.

How we protect it

Security you can rely on

EU-sovereign hosting

Compute runs in Germany on infrastructure we operate ourselves — no dependency on a US hyperscaler for your data.

Data residency

Your data is stored and processed in the EU, on a self-hosted database with EU-based sub-processors. It stays here.

Encryption everywhere

Traffic is encrypted in transit with modern TLS, and data is encrypted at rest. Access is scoped and audited.

Un-clonable tags

Our secure tags use NXP NTAG424 DNA — each tap re-computes a cryptographic signature (CMAC), so a copied tag simply fails verification.

Private by design

A finder can reach an owner without ever seeing their contact details. Tags reveal only what their owner explicitly permits.

GDPR-native

Export, deletion and consent are built in — Articles 17, 20 and 26 are part of the product, not a bolt-on.

Standards

Aligned with European standards

GDPREU-sovereign hostingEU Data Act
For businesses

Need the full compliance posture?

Buying for an organization? Our Trust Center goes deeper: our stance today on GDPR and data sovereignty, and an honest roadmap for NIS2, the Cyber Resilience Act, the EU Digital Product Passport and more — each with a plain-language status.