Trust Center

Hosted in GermanyData residency for your event data.

AirLST runs on Amazon Web Services in data centers in Germany. For organizers, that means data residency in the EU, the GDPR as the standard and an infrastructure with the certifications your IT team asks about.

Talk to us about hosting Request documents

01Location

What hosting in Germany means

Where data is stored decides which data protection law applies and how much review work a vendor needs.

Data residency in Germany

Attendee data is stored in AWS data centers in Germany.

The GDPR as the standard

Processing takes place within the scope of European data protection law. More on the GDPR page.

Used worldwide in the browser

The hosting location defines where data is stored, not who can use the platform. US teams work with AirLST in the browser like with any cloud software.

02Credentials

Credentials of the AWS infrastructure

These certifications cover the data centers, network and virtualization of our hosting provider, not the AirLST application. For AirLST itself, TISAX is the evidence.

ISO/IEC 27001, 27017, 27018Information security, cloud security and protection of personal data in the cloud.
ISO/IEC 27701Privacy information management.
SOC 1, 2 and 3US audit reports; AirLST has no SOC 2 report of its own.
BSI C5Cloud criteria of the German Federal Office for Information Security.
ISO 22301Business continuity of the infrastructure.
TISAXAWS is also TISAX-assessed, in addition to AirLST\'s own assessment.

Source and current status: AWS compliance programs. AWS provides the reports to its customers through AWS Artifact.

03Read on

More in the trust center

GDPRRoles, the data processing agreement and your guests' rights.Read more →Information securityHow AirLST protects attendee data, with TISAX as independent proof.Read more →SubprocessorsWho processes data in the chain and how to get the current list.Read more →

04FAQ

Hosting FAQ

What does "hosted in Germany" mean for my event data?

It means AirLST stores your guest lists, registrations and check-in data on Amazon Web Services in Germany. Processing takes place under the GDPR and German data protection law, and core operations involve no transfers to countries outside the EU. The legal side is covered on the GDPR compliance page.

What is data residency, and why does it matter in a vendor review?

Data residency is the physical location where data is stored. It determines which data protection law applies and how much review work a vendor needs. With AirLST, data residency is Germany, which keeps EU attendee data inside the EU and avoids extra safeguards for third-country transfers in core operations.

Can US companies use event software hosted in Germany?

Yes. The hosting location defines where data is stored, not who can use the platform. Teams in the US work with AirLST in the browser like with any cloud software. Hosting in Germany is an advantage when you run events in Europe or invite European guests, because their personal data stays under the GDPR.

Which data center does AirLST use?

The AirLST platform runs on Amazon Web Services (AWS) in data centers in Germany.

Which certifications cover the hosting environment?

The AWS data centers and cloud infrastructure are certified to ISO/IEC 27001, 27017, 27018 and 27701, among others, and are covered by the German BSI C5 attestation and SOC 1, SOC 2 and SOC 3 reports. These cover the AWS infrastructure, not the application. At company level, AirLST is TISAX-assessed. TISAX is the information security assessment standard of the automotive industry; see the TISAX assessment page.

How are availability and redundancy handled?

Availability and service levels are agreed in the contract; the figures are part of the agreement, not of this page.