# Regulated data, handled with care.

> You publish information that authorities and consumers rely on. Here is how the platform treats it.

Canonical: https://eulabel.eu/security

## What we do today.

### EU hosting

Application data and passport metadata sit in Frankfurt (fra1).

### Field-level access

Each field has an access class. One filter serves battery, textile and furniture pages and the public JSON endpoint. Wine pages show public fields only.

### Revocable grants

Restricted audiences use tokens you issue and can revoke at any time.

### Scoped API keys

Keys limited by permission and project, which you can revoke from the dashboard.

### Stored history

Published versions are stored, and each status change and recorded event carries a date. Other edits to item data are not logged, and deleting an item removes its events.

### Tenant isolation

Product, passport and operator data are scoped to your organization.

## Careful by default.

Wine e-label pages set no cookies and hold no marketing content, as the rules require. We never sell your data. Our privacy policy covers this site, accounts and the newsletter. It does not yet describe passport-page view logging or all our infrastructure providers.

## Yours to take with you.

Your GTINs are yours, and your current passports and items can be read through the API. Earlier and withdrawn versions are stored, but the API and dashboard don't show them yet. Codes printed with eulabel.eu resolve through our domain.

## Found a security issue?

Email support@eulabel.eu. We read every report and reply as soon as we can.