{"id":5373,"date":"2026-05-25T13:07:42","date_gmt":"2026-05-25T13:07:42","guid":{"rendered":"https:\/\/aliteo.com\/?page_id=5373"},"modified":"2026-05-27T10:47:47","modified_gmt":"2026-05-27T10:47:47","slug":"security-and-privacy","status":"publish","type":"page","link":"https:\/\/aliteo.com\/en\/security-and-privacy\/","title":{"rendered":"Security and Privacy"},"content":{"rendered":"\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h1 class=\"wp-block-heading\">Security and Privacy<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Security is an integral part of ALITEO\u2019s development, not an additional layer. This document is intended for customers, partners and security teams who need to understand how ALITEO protects their data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this document, we describe security and data protection from the perspective of infrastructure, product, operations and regulatory compliance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The ALITEO security program is built on the following principles:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Confidentiality \u2013 customer data is strictly separated and accessible only to authorized persons<\/li>\n\n\n\n<li>Integrity \u2013 the accuracy and consistency of data is maintained throughout its entire lifecycle<\/li>\n\n\n\n<li>Availability \u2013 the platform is operated with the aim of maximum continuous availability<\/li>\n\n\n\n<li>Physical and network security \u2013 protection of infrastructure against unauthorized access<\/li>\n<\/ol>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Infrastructure<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO operates its infrastructure exclusively on the Microsoft Azure platform. Microsoft manages the physical security and compliance of the cloud infrastructure; ALITEO manages the security of the software and customer data within this infrastructure.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Web Servers<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The platform is built on .NET 8 and is continuously upgraded to current long-term support versions. The architecture uses Azure App Services, Azure Functions and Azure CDN for static content distribution.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Database<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The primary data store is Azure Database for MySQL \u2013 a fully managed relational database. In addition, the system uses Elasticsearch for full-text search and Redis for distributed cache and session storage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Authentication Data<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Login and session data is managed by Azure Active Directory B2C. Passwords are not stored in the ALITEO database \u2013 authentication is fully handled by Azure B2C. After login, the application receives only tokens (OpenID Connect); ALITEO never sees or stores the user\u2019s password.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Company Data<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All organization data is stored: projects, tasks, schedules, portfolios, reports and uploaded attachments. Data is logically separated by company identifier (see Multi-tenancy below).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>User Data<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">User profiles are stored in the system \u2013 name, email address and preferences. User data is separated by user identifier.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">File Storage<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Attachments and database backups are stored in Azure Blob Storage. Attachments originating from cloud platforms (Microsoft 365, Google Drive) are stored as links to the source platforms and are not physically copied to ALITEO storage.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Data Flow<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Customer data enters the system through HTTPS requests from a web browser or mobile application. Features requiring real-time communication use WebSocket connections encrypted via the WSS (WebSocket Secure) protocol. Data is processed by application services on Azure App Service and Azure Functions and stored in Azure Database for MySQL. Attachments are stored in Azure Blob Storage. Full-text search is provided by Elasticsearch.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">European Infrastructure<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Customer data (databases, files, backups) is stored exclusively in European Azure regions. AI components use regions according to the table below:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Purpose<\/th><th>Region<\/th><\/tr><\/thead><tbody><tr><td>Primary production<\/td><td>North Europe (Dublin, Ireland)<\/td><\/tr><tr><td>Geo-redundant backup (data backups only)<\/td><td>West Europe (Amsterdam, Netherlands)<\/td><\/tr><tr><td>Embedding models for semantic search<\/td><td>Sweden Central<\/td><\/tr><tr><td>RAG embedding models and AI Search index<\/td><td>France Central<\/td><\/tr><tr><td>AI assistant \u2013 language model (LLM)<\/td><td>East US 2<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Primary customer data is stored exclusively in the primary European region. Geo-redundancy applies only to data backups \u2013 backup copies are stored in the West Europe region. The primary database is not geographically replicated in real time. AI assistant requests are processed by a language model in the East US 2 region; data is not persistently stored in this region.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Data Security<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Encryption in Transit<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All communication between the client and server takes place via HTTPS (TLS 1.2 and higher) or WSS (WebSocket Secure). Unencrypted HTTP connections are automatically redirected to HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Encryption at Rest<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Layer<\/th><th>Mechanism<\/th><\/tr><\/thead><tbody><tr><td>Azure Database for MySQL<\/td><td>AES-256, keys managed by Microsoft<\/td><\/tr><tr><td>Azure Blob Storage<\/td><td>AES-256, keys managed by Microsoft<\/td><\/tr><tr><td>Sensitive records in the database (tokens, API keys)<\/td><td>Application-level encryption; encryption keys in Azure Key Vault<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Tokens and other sensitive records are encrypted at the application level before being written to the database. Keys are managed separately in Azure Key Vault; all access to keys is identity-controlled and audited.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Multi-tenancy<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO is a multi-tenant web application \u2013 infrastructure is shared between customer instances. Data separation is ensured at the application level by two independent keys:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Company ID \u2013 separates all company data (projects, tasks, schedules). No company has access to another company\u2019s data.<\/li>\n\n\n\n<li>User ID \u2013 separates users\u2019 personal data.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Access to another user\u2019s or company\u2019s data is not possible. A task can only be assigned to a user who is a member of the given company; task escalation can only be performed by a member of both participating companies. Each record in the database contains a tenant identifier, which is validated at the application level for every request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO distinguishes multiple ways in which a user may gain access to an organization\u2019s data (so-called entry points). In addition to standard logged-in users, the system also supports anonymous followers \u2013 users who can follow selected objects without a full account. All these entry points are controlled and audited; access to organization data is always tied to explicit permission granted by an administrator.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Scalability and Reliability<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO is built on Microsoft Azure, which provides horizontal scalability of services. The database is operated as a fully managed service with automatic failover.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Backups<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Database backups are performed in two modes: full backup once a day and incremental transaction log backup at short intervals. This allows the database to be restored to any point in time if needed. Backups are stored in geo-redundant storage (backup region West Europe) and have the same level of protection as production data.<\/p>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Product Security Features<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Login Security<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Azure B2C and Passwords<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Login is performed exclusively through Azure Active Directory B2C. The user\u2019s password is entered only on pages hosted by Microsoft \u2013 ALITEO never sees or stores the password. This also applies to mobile devices, where login takes place in the system browser, not inside the application.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All sensitive login credentials and API keys are stored in Azure Key Vault. Applications access Key Vault through managed identities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Single Sign-On<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO supports login via Google account. In version 26.1 (planned for release by the end of summer 2026), enterprise Single Sign-On support will be available in two variants:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>JIT (Just-in-<\/strong><strong>Time<\/strong><strong> <\/strong><strong>provisioning<\/strong><strong>)<\/strong> \u2013 the user account is created automatically upon first login via corporate identity. There is no need to create the user in advance.<\/li>\n\n\n\n<li><strong>SCIM<\/strong><strong> <\/strong>\u2013 continuous automatic synchronization of users and groups from the corporate directory (e.g. Microsoft Entra ID), including their creation, updates and deactivation.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Customers interested in early access can contact us at .<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">User Management and Access Rights<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Adding users to the organization \u2013 both internal and external \u2013 is reserved exclusively for the organization administrator. No other role has permission to add members. The administrator can deactivate any user\u2019s access at any time.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organization administrators (admins) in ALITEO can:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Manage users \u2013 add and remove organization members<\/li>\n\n\n\n<li>Manage permissions \u2013 set access rights at the level of projects, teams and other objects<\/li>\n\n\n\n<li>Export or request deletion of company data<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Access rights in ALITEO are defined by a combination of roles and permissions assigned to specific objects (projects, teams, portfolios, document folders and others). Each user is marked as internal or external; external members always have limited permissions compared to internal members. A detailed description of roles, membership types and their permissions is part of the ALITEO product documentation.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Data Management<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Users can export selected own data within the application; the availability of this function depends on the user\u2019s role and the configuration of the given component. Data deletion can be carried out upon request through ALITEO support.<\/p>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Application Security<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO is a web SaaS application. Users access data through a web browser or mobile application.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The platform is built on .NET 8 and is continuously updated to current LTS versions. Development is carried out with an emphasis on security principles. We regularly perform internal security reviews focused, among other things, on:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Injection (SQL, command line)<\/li>\n\n\n\n<li>Unauthorized access to data (Broken Access Control)<\/li>\n\n\n\n<li>Exposure of sensitive data<\/li>\n\n\n\n<li>Cross-Site Scripting (XSS)<\/li>\n\n\n\n<li>Cross-Site Request Forgery (CSRF)<\/li>\n\n\n\n<li>Use of components with known vulnerabilities<\/li>\n\n\n\n<li>Insufficient logging and monitoring<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Code changes pass through automated tests and manual code review. Before deployment to production, changes are verified in a test environment.<\/p>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">ALITEO Platform<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Integrations and API<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO provides a REST API that enables programmatic access to platform data. API request authentication is performed using an API key issued at the organization level.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Third-party Applications<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO integrates with the following external platforms:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Platform<\/th><th>Purpose<\/th><\/tr><\/thead><tbody><tr><td>Microsoft Graph API<\/td><td>Integration with calendar and contacts (Microsoft 365)<\/td><\/tr><tr><td>Google Calendar API<\/td><td>Integration with Google Calendar and contacts<\/td><\/tr><tr><td>Azure AI Services<\/td><td>AI assistant \u2013 language model and RAG embedding models<\/td><\/tr><tr><td>Azure OpenAI<\/td><td>Embedding models for semantic search<\/td><\/tr><tr><td>Azure AI Search<\/td><td>AI assistant search index (RAG architecture)<\/td><\/tr><tr><td>SendGrid<\/td><td>Sending email notifications<\/td><\/tr><tr><td>GoPay<\/td><td>Payment gateway<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>AI Assistant<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AI functionality is operated as a separate, isolated service separated from the main application. This architecture ensures that the AI component accesses only the data necessary for the given function and does not have access to other parts of the system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Requests are processed through Azure AI Services and Azure OpenAI models within Microsoft infrastructure. Microsoft\u2019s data protection terms apply to data processing; customer data is not shared with external AI providers outside this agreement. Customer data processed by models is not used to train foundation AI models ().<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data processed through other third-party applications is processed only to the extent necessary to provide the given function.<\/p>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Operational Security<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">ALITEO Information Security<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Information security is the responsibility of a designated representative of company management. Security policies are regularly reviewed within the Information Security Management System (ISMS) certified according to ISO\/IEC 27001. Security incidents and serious vulnerabilities are escalated to management level.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Confidential Information<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO considers all customer data confidential regardless of its classification. Access to confidential information is limited exclusively to employees who need it to perform their work, and only to the necessary extent.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Human Resources<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">All ALITEO employees and contractors are contractually bound by confidentiality obligations. Access to production systems and customer data is governed by the principle of least privilege. Access is managed through Azure Managed Identities \u2013 developers access production data only in defined and justified cases.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Physical Security<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The physical security of data centers is provided by Microsoft within the Azure platform. Microsoft maintains global standards for the physical protection of its data centers.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Network Security<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Communication between individual system components is limited only to expected and defined flows through Azure infrastructure configuration.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Risk and Vulnerability Management<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO performs internal security reviews focused on identifying vulnerabilities in both the application and infrastructure. Security deficiencies are assessed according to severity and remediated within an appropriate timeframe.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Incident Response<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO has defined procedures for responding to security incidents. In the event of a security breach, affected customers are informed without undue delay from the discovery of the incident, in accordance with GDPR requirements.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Disaster Recovery and Business Continuity<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO uses Azure geographic redundancy to ensure disaster recovery:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Azure Blob Storage is operated in RA-GRS (Read-Access Geo-Redundant Storage) mode \u2013 data is automatically replicated to a backup region.<\/li>\n\n\n\n<li>Database backups are stored in geo-redundant storage in the backup region.<\/li>\n\n\n\n<li>In the event of a primary region outage, backup copies of data are available in the secondary region.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\">Data Retention and Disposal<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Retention<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Customer data is retained for the duration of the contractual relationship and subsequently according to the terms specified in the Terms and Conditions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Disposal<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Upon request by the customer or their authorized representative, ALITEO will delete customer data.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Monitoring<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO monitors system operation and availability through several tools:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Internal error log \u2013 we collect and analyze application errors<\/li>\n\n\n\n<li>Audit records (Activities) \u2013 records of key operations performed by users are available within the application<\/li>\n\n\n\n<li>Health checks \u2013 automated availability checks of key components with SMS and email notifications to developers<\/li>\n\n\n\n<li>Azure Application Insights \u2013 additional performance and availability monitoring<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Application logs are retained for 30\u201390 days.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Sub-processors and Vendor Management<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO carefully selects third parties that meet data protection and security requirements consistent with our own standards. Contractual relationships with vendors include commitments to protect customer data.<\/p>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Privacy, Certification and Compliance<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Privacy Policy and Terms and Conditions<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data processing terms, contractual terms and SLA are available at .<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Certification and Legal Compliance<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>ISO\/IEC 27001<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The operator of the ALITEO platform, KARAT Software a.s., is certified according to ISO\/IEC 27001 for its Information Security Management System (ISMS). The certification confirms that processes and controls in the area of information security have been verified by an independent third party.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">GDPR<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">ALITEO acts as a personal data processor within the meaning of the GDPR regulation (General Data Protection Regulation). The personal data processed includes the first name, last name and email address of system users.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Steps ALITEO has taken to comply with GDPR:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Review of contracts with customers, partners and vendors<\/li>\n\n\n\n<li>Strengthening of security procedures and internal documentation<\/li>\n\n\n\n<li>Mapping of processed data<\/li>\n\n\n\n<li>Introduction of a process for exercising the rights of data subjects<\/li>\n\n\n\n<li>Employee training in the area of personal data protection<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>DPA (Data Processing Agreement)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In accordance with GDPR, ALITEO enters into a Data Processing Agreement (DPA) with customers automatically as part of accepting the contractual terms. ALITEO undertakes to process personal data exclusively according to the controller\u2019s instructions and in accordance with GDPR requirements. Security incidents are reported without undue delay from their discovery.<\/p>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Security and Privacy Security is an integral part of ALITEO\u2019s development, not an additional layer. This document is intended for customers, partners and security teams [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-5373","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Security and Privacy - ALITEO<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/aliteo.com\/en\/security-and-privacy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security and Privacy - ALITEO\" \/>\n<meta property=\"og:description\" content=\"Security and Privacy Security is an integral part of ALITEO\u2019s development, not an additional layer. This document is intended for customers, partners and security teams [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/aliteo.com\/en\/security-and-privacy\/\" \/>\n<meta property=\"og:site_name\" content=\"ALITEO\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/aliteo.software\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-27T10:47:47+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/aliteo.com\\\/en\\\/security-and-privacy\\\/\",\"url\":\"https:\\\/\\\/aliteo.com\\\/en\\\/security-and-privacy\\\/\",\"name\":\"Security and Privacy - ALITEO\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aliteo.com\\\/en\\\/#website\"},\"datePublished\":\"2026-05-25T13:07:42+00:00\",\"dateModified\":\"2026-05-27T10:47:47+00:00\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/aliteo.com\\\/en\\\/security-and-privacy\\\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/aliteo.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/aliteo.com\\\/en\\\/\",\"name\":\"ALITEO.com\",\"description\":\"Just another WordPress site\",\"publisher\":{\"@id\":\"https:\\\/\\\/aliteo.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/aliteo.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/aliteo.com\\\/en\\\/#organization\",\"name\":\"ALITEO.com\",\"url\":\"https:\\\/\\\/aliteo.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/aliteo.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/aliteo.com\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/Union.svg\",\"contentUrl\":\"https:\\\/\\\/aliteo.com\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/Union.svg\",\"width\":176,\"height\":24,\"caption\":\"ALITEO.com\"},\"image\":{\"@id\":\"https:\\\/\\\/aliteo.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/aliteo.software\",\"https:\\\/\\\/www.instagram.com\\\/aliteo_app\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@ALITEO_software\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security and Privacy - ALITEO","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/aliteo.com\/en\/security-and-privacy\/","og_locale":"en_US","og_type":"article","og_title":"Security and Privacy - ALITEO","og_description":"Security and Privacy Security is an integral part of ALITEO\u2019s development, not an additional layer. This document is intended for customers, partners and security teams [&hellip;]","og_url":"https:\/\/aliteo.com\/en\/security-and-privacy\/","og_site_name":"ALITEO","article_publisher":"https:\/\/www.facebook.com\/aliteo.software","article_modified_time":"2026-05-27T10:47:47+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/aliteo.com\/en\/security-and-privacy\/","url":"https:\/\/aliteo.com\/en\/security-and-privacy\/","name":"Security and Privacy - ALITEO","isPartOf":{"@id":"https:\/\/aliteo.com\/en\/#website"},"datePublished":"2026-05-25T13:07:42+00:00","dateModified":"2026-05-27T10:47:47+00:00","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/aliteo.com\/en\/security-and-privacy\/"]}]},{"@type":"WebSite","@id":"https:\/\/aliteo.com\/en\/#website","url":"https:\/\/aliteo.com\/en\/","name":"ALITEO.com","description":"Just another WordPress site","publisher":{"@id":"https:\/\/aliteo.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/aliteo.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/aliteo.com\/en\/#organization","name":"ALITEO.com","url":"https:\/\/aliteo.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aliteo.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/aliteo.com\/wp-content\/uploads\/2022\/09\/Union.svg","contentUrl":"https:\/\/aliteo.com\/wp-content\/uploads\/2022\/09\/Union.svg","width":176,"height":24,"caption":"ALITEO.com"},"image":{"@id":"https:\/\/aliteo.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/aliteo.software","https:\/\/www.instagram.com\/aliteo_app\/","https:\/\/www.youtube.com\/@ALITEO_software"]}]}},"_links":{"self":[{"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/pages\/5373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/comments?post=5373"}],"version-history":[{"count":1,"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/pages\/5373\/revisions"}],"predecessor-version":[{"id":5374,"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/pages\/5373\/revisions\/5374"}],"wp:attachment":[{"href":"https:\/\/aliteo.com\/en\/wp-json\/wp\/v2\/media?parent=5373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}