Trust Center
What procurement, IT and data protection want to know before signing.
How we protect your data, what we commit to in our contracts and exactly where it is written. Download every document right here, no form, no sign-up.
Loading status …- 99.5%Availability per contract year, committed in the SLA
- FrankfurtOperated in AWS data centers in Frankfurt, Germany
- TLS 1.2+Encrypted in transit and at rest
- 14 daysMinimum notice for any planned maintenance, per the SLA
Security at a glance
Six areas, each with defined measures.
The details are in our technical and organizational measures, the annex to every data processing agreement. TOM as PDF (German)
Organization and rules
Security starts with people and processes.
- We work in line with ISO/IEC 27001, the SOC 2 criteria and NIS-2.
- Every employee is bound to confidentiality.
- Data protection and information security training at least once a year
- External data protection officer
- Participant in the German Alliance for Cyber Security
Data center and network
Transaction-Network runs on Amazon Web Services in Frankfurt, Germany.
- Logically separated networks, segmentation and firewalls
- Separate environments for development, test, QA and production
- Infrastructure as code: every environment is built automatically
- Physical data center security by AWS
Encryption
Your data is encrypted in transit and at rest.
- HTTPS with TLS 1.2 or 1.3 for the application, the app and all interfaces
- Stored data is encrypted.
- Central, protected key management
- Passwords stored only as secure hashes
Sign-in and access
Every sign-in runs through a central identity service.
- Two-factor authentication for administrative access
- Lockout after repeated failed attempts
- Separate accounts for use and administration
- Your ERP connected through a dedicated VPN
Monitoring
We monitor operations continuously. Anomalies trigger an alert.
- Central logging of security-relevant events
- Alerts go to our engineering team, who assess and respond
- Automated vulnerability scanning of code and infrastructure
- Updates and patches on a fixed schedule
- Regular penetration tests by external testers, most recently 8com in June 2026
Availability
99.5% per contract year. If we miss it, you receive a credit.
- Regular backups
- Planned maintenance announced at least two weeks ahead
- Disruptions shown on the status page without delay
- Support with fixed response times by priority
Your data
Your data stays yours. It says so in the contract.
Four commitments. Each one is written in our terms and conditions or the data processing agreement.
Your data belongs to you.
What you bring in and what is created in your account remains your property. You can request some or all of your data at any time.
Manufacturers see only their machines.
A manufacturer sees only its own machines in your plant. What you create yourself stays hidden until you share it. We pass data about other brands to no manufacturer.
Your AI works only for you.
Every customer, machine and component has its own data room. We do not use personal data to train AI. A person always makes the binding decision.
A clean exit.
When the contract ends, you receive all data including backups in a common format. Then we delete it completely.
Data protection officerUlrich Emmert, attorney, e|s|b data GmbH, Stuttgart · info@esb-data.de
Architecture
How Transaction-Network is built.
For your IT at a glance: machines connect through the IoT Hub, your systems such as SAP, Jira or Zendesk through open interfaces. Security, roles and access rights are part of the core.
Integration
Your systems stay. Transaction-Network connects to them.
We connect SAP ERP through SAP standards such as IDocs and function modules, without replacing your ERP processes. Ready-made adapters exist for SAP as well as Jira, Zendesk and Quanos; we clarify other systems with your IT team.
- REST APIs and webhooks
- OPC UA and MQTT for machine data
- Authentication via OAuth 2.0 and OpenID Connect
- Machine record in the Asset Administration Shell (AAS) industry standard, on request in your SAP via the SAP adapter
How integration works
System analysis
Together with your IT team, we look at which systems and interfaces exist and which data is needed.
Mapping
Together we define which data flows between which systems and which system leads.
Implementation
We set up adapters and interfaces. Your ERP stays the leading system for master and business data.
Testing
Everything is tested in a test environment, with no risk to your operations.
Go-live
We go live and monitor the interfaces. Every import and every sync stays traceable.
Contracts and documents
All contracts on one page.
Terms and conditions, SLA, data processing agreement, TOM and terms of use as PDF, valid for contracts from November 1, 2026. Plus a guide to which terms apply to you.
- Software terms
- Consulting terms
- SLA
- DPA
- TOM
- Terms of use
We will send you the full description of our security architecture on request.
RequestSystem status
How Transaction-Network is running right now.
Our status page shows the current state of all services, planned maintenance and past incidents.
Open status pageFound a security vulnerability?
Write to our security address, whether it concerns the platform, the IoT Hub or this website. Please name the product and version, describe what you found and how to reproduce it.
- We confirm receipt within 7 days and keep you informed of the progress.
- We review every report, fix confirmed vulnerabilities and inform affected customers.
- Please do not publish until the vulnerability is fixed; we agree the timing with you.
- Please do not access other people's data or disrupt operations. On request, we credit you as the finder.
Questions from your IT team?
Integration, interfaces, data protection: Matthias Maier is responsible for engineering and security.
matthias.maier@