Security on C5-certified cloud infrastructure.

Modern AI and audited security are not mutually exclusive. HeroChat combines both – on cloud infrastructure that is independently certified under the BSI C5.

C5-audited security for your customer communication

For its central hosting and AI components, HeroChat relies on Microsoft Azure and Hetzner – cloud platforms with independently audited C5 Type 2 attestations. This way your customer communication runs on a foundation that has been assessed against recognised security standards.

What the BSI C5 means

The Cloud Computing Compliance Criteria Catalogue (C5) is an audit catalogue from the German Federal Office for Information Security (BSI). It defines minimum requirements for secure cloud services. A Type 2 attestation confirms, through an independent audit, that the required measures were not only described but actually implemented effectively over a defined period.

C5-certified cloud platforms

For its central components, HeroChat relies on two platforms with independently audited C5 Type 2 attestations.

C5-aligned operations on C5-certified infrastructure

HeroChat aligns its security-relevant operational, development and data protection processes with the criteria of the BSI C5. The central hosting and AI components run on the C5 Type 2 certified cloud platforms from Hetzner and Microsoft Azure.

Carefully selected service providers

We select additional security-relevant service providers based on documented data protection and security requirements and contractually commit them to implementing appropriate technical and organisational measures. Read what this overall approach looks like on our data protection page.

The C5 Type 2 attestations mentioned refer to the respective cloud platforms (Microsoft Azure, Hetzner). HeroChat aligns its own processes with the criteria of the BSI C5. The providers' current attestations and reports are authoritative.