Trust Center
How ManyPI keeps your data safe, who stands behind it, and where every commitment is written down.
Listed in EPALEEuropean CommissionManyPI for EducationListed on EPALE, the European Commission's adult learning platform.Made inGermanyJoin 1.700+ growing companies
Security
The technical and organisational measures set out in Annex II of our Data Processing Agreement.
Encrypted in transit and at rest
TLS on every connection and encrypted storage. Mailbox passwords and OAuth tokens are encrypted a second time in the application, with AES-256-GCM.
Workspaces kept apart by the database
Row-level security is enforced by the database engine itself, so one workspace's credentials can't read another workspace's rows, even if the application layer is bypassed.
Hosted in the European Union
The database runs in an EU region, background processing in Germany and Finland, product analytics in Frankfurt.
Read the detailsEvery admin access is logged
Each access records who, what, when and from where. Changes made through the admin interface also need a one-time code sent separately.
Backups with point-in-time recovery
Managed, encrypted backups. Data you delete leaves the backups within 90 days at the latest.
Breach notice within 48 hours
If a breach affects your data, you hear from us within 48 hours of us becoming aware of it, with what happened and what we are doing about it.
Read the details
Privacy and compliance
How we process personal data under the GDPR, and the documents that govern it.
A DPA, ready to use
The Data Processing Agreement under Article 28 GDPR is part of the Terms, with Standard Contractual Clauses for the US providers. Nothing to sign separately.
Read the details15 sub-processors, all listed
Each one with its purpose, location and transfer safeguard. Subscribe to hear about changes 30 days before they take effect.
Read the detailsMailboxes read sparingly
Sync reads the inbox and sent items only. A message is stored only when it involves a contact already in your workspace, and attachments are never stored.
Suppression checked on every send
Outreach checks your suppression list before each email. When the research agent reads the web, it respects robots.txt.
Read the detailsAnalytics only with consent
Product analytics and session replay start only after you agree in the cookie banner, with text and input values masked.
Read the detailsYour security questionnaire, answered
Send us your questionnaire and we fill it in free of charge within 30 days, once a year and after any breach.
Email us
Who stands behind ManyPI
ManyPI
Based in Berlin, Germany, and run by Ole Nepomuk Mai. The full legal details are in our imprint.
Read the imprintSupervised in Berlin
Our data protection authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit. Your account data, CRM records, lead records and synchronised mail are stored on servers located in the European Union.
Payments through Stripe
You pay through Stripe Managed Payments. You enter your card details with Stripe directly, and they never reach ManyPI.
Documents and contacts
- Privacy Policy
- Terms of Service
- Data Processing Agreement
- Sub-processors
- Acceptable Use Policy
- Cookie Policy
- Your GDPR rights
- CCPA notice
- Imprint
- System status
- Report a vulnerabilitysecurity@manypi.com
- Privacy and data requestsprivacy@manypi.com
- Contracts and legallegal@manypi.com
- Report abuseabuse@manypi.com