Your Data. How we protect it.

How we protect your health data — technically and legally.

TLS 1.3

AES-256

DSGVO

EU Hosting

256
Bit Encryption: EU
Server Location: 24/7
Monitoring

Multi-Layer Security Architecture

Our security measures interlock on multiple levels – from data transmission to storage.

TLS 1.2/1.3 Encryption

All connections use Transport Layer Security with the latest protocol versions.

AES-256 Data Storage

Local health data is protected with the strongest encryption standard.

Biometric Authentication

Optional security via fingerprint or Face ID for secure access.

Hardware Key Storage

Android Keystore and iOS Keychain for hardware-backed cryptography.

Certificate Pinning

Additional certificate validation prevents man-in-the-middle attacks.

Live Encryption

Real-time Data Encryption

41936071DFD7AD912FEE8284FD2D7008DDA69BBB

F71372C9C634045EF3D9552F1EC6B418139B733B

EDBD6228AF6B601DFC2647DE358460A5749B8936

6E3EF9E0488FFBD49A057CF094AA74B80DBEB8FF

9C0893B0F75990691214486FA95B4EE8AB942315

7CAD4B65B8CA4CFCE298B060D36FA9179E22DFC1

3CDDD1AE99ECC7C3793262CA331DF6611D4795B4

3FC0D245EC70C6E0B1B44DB0D23B26FC78B308AF

Encrypted

AES-256-GCM

TLS 1.3

Encryption at Every Level

Your data is protected at every stage – during transmission, storage, and API communication.

Transmission(Data in Transit)

TLS 1.2/1.3 ProtocolHTTPS-only APICertificate Pinning

Storage(Data at Rest)

AES-256 EncryptionHardware KeysSecure Keychain

Communication(API Security)

Asymmetric KeysPerfect Forward SecrecyDigital Signatures

Standards and legal framework

The requirements and standards we align our work with.

GDPR

Legal framework

We process personal data under the European General Data Protection Regulation: with a designated data protection officer, documented legal bases, transparent processing and the data subject rights under Art. 15 to 22 GDPR.

ISO 27001

Not certified

Our security practices align with the principles of ISO 27001. We are not certified against that standard.

Backend Infrastructure

Our server infrastructure is provided by Supabase and offers the highest availability and security.

Hosted in EU data centers (Frankfurt)
PostgreSQL with Row Level Security
Automatic Backups & Disaster Recovery
Supabase, as the operator, is SOC 2 Type II certified

Frankfurt

More Research

For Researchers

Multimodal data collection for clinical studies and research projects.

Methodology

Energy Envelope Theory and the scientific foundations of our algorithms.

ME/CFS

Foundations, symptoms, differentiation, and everyday illness context.

PEM

Delayed worsening after exertion, early warning signs, and common patterns.

Pacing

Practical load management for more stable daily life.

Fatigue & Lab Markers

Read ferritin, vitamin D, B12, and fatigue-related lab questions in symptom context.

Whitepapers

Technical documentation and peer-reviewed research behind Elara.

Security Questions?

For questions about the security of your data, contact our Security Team. We usually respond within 24 hours.

Get in Touch

Last updated: September 2026