Security and data
Regulated data, handled with care.
You publish information that authorities and consumers rely on. Here is how the platform treats it.
In practice
What we do today.
- EU hosting
- Application data and passport metadata sit in Frankfurt (fra1).
- Field-level access
- Each field has an access class. One filter serves battery, textile and furniture pages and the public JSON endpoint. Wine pages show public fields only.
- Revocable grants
- Restricted audiences use tokens you issue and can revoke at any time.
- Scoped API keys
- Keys limited by permission and project, which you can revoke from the dashboard.
- Stored history
- Published versions are stored, and each status change and recorded event carries a date. Other edits to item data are not logged, and deleting an item removes its events.
- Tenant isolation
- Product, passport and operator data are scoped to your organization.
We do not hold ISO 27001 or SOC 2 certification today. We will say so here when that changes.
Privacy
Careful by default.
Wine e-label pages set no cookies and hold no marketing content, as the rules require. We never sell your data. Our privacy policy covers this site, accounts and the newsletter. It does not yet describe passport-page view logging or all our infrastructure providers.
Your data
Yours to take with you.
Your GTINs are yours, and your current passports and items can be read through the API. Earlier and withdrawn versions are stored, but the API and dashboard don't show them yet. Codes printed with eulabel.eu resolve through our domain.
Found a security issue?
Email support@eulabel.eu. We read every report and reply as soon as we can.
Start with one product.
Early access is free and open to producers in all four sectors. Your QR codes keep working as the rules change.