Elara Logo
Elara-HealthYour pacing diary

Your Data. How we protect it.

How we protect your health data — technically and legally.

  • TLS 1.3
  • AES-256
  • DSGVO
  • EU Hosting
256
Bit Encryption
EU
Server Location
24/7
Monitoring

Multi-Layer Security Architecture

Our security measures interlock on multiple levels – from data transmission to storage.

  • TLS 1.2/1.3 Encryption

    All connections use Transport Layer Security with the latest protocol versions.

  • AES-256 Data Storage

    Local health data is protected with the strongest encryption standard.

  • Biometric Authentication

    Optional security via fingerprint or Face ID for secure access.

  • Hardware Key Storage

    Android Keystore and iOS Keychain for hardware-backed cryptography.

  • Certificate Pinning

    Additional certificate validation prevents man-in-the-middle attacks.

Encryption at Every Level

Your data is protected at every stage – during transmission, storage, and API communication.

  • Transmission

    Data in Transit

    • TLS 1.2/1.3 Protocol
    • HTTPS-only API
    • Certificate Pinning
  • Storage

    Data at Rest

    • AES-256 Encryption
    • Hardware Keys
    • Secure Keychain
  • Communication

    API Security

    • Asymmetric Keys
    • Perfect Forward Secrecy
    • Digital Signatures

Standards and legal framework

The requirements and standards we align our work with.

GDPR

Legal framework

We process personal data under the European General Data Protection Regulation: with a designated data protection officer, documented legal bases, transparent processing and the data subject rights under Art. 15 to 22 GDPR.

ISO 27001

Not certified

Our security practices align with the principles of ISO 27001. We are not certified against that standard.

Backend Infrastructure

Our server infrastructure is provided by Supabase and offers the highest availability and security.

  • Hosted in EU data centers (Frankfurt)
  • PostgreSQL with Row Level Security
  • Automatic Backups & Disaster Recovery
  • Supabase, as the operator, is SOC 2 Type II certified