Trust and security
Security you can check.
RUBINLAKE is built and operated in Frankfurt am Main. This page shows what we can prove, where our data comes from, how we protect your account and where the platform runs for you.
- EcoVadis Platinum 2024
- GDPR data processing agreement
- Hosted in Frankfurt am Main
- German Innovation Award 2025
Evidence
What we can show
Each card carries the status it actually has and links to the place where you can check it.
EcoVadis Platinum 2024
Independently ratedSustainability rating across environment, labour and human rights, ethics and sustainable procurement. Platinum goes to the top one percent of companies rated by EcoVadis.
Verify the rating at EcoVadisGDPR
Contractually governedData processing agreement under Art. 28 GDPR on request. A public notice under Art. 14 for every person in our database, with an objection route that needs no account.
Read the privacy policy
AwardedGerman Innovation Award 2025
Winner in the category Information Technologies, Functional Software, for the RUBINLAKE platform.
View the entry
AwardedKununu Top Company 2025
Rated by the people who work here. Security starts with the team that builds and runs the platform.
View the entry
SignatoryCharta der Vielfalt
A public commitment to a workplace free of prejudice. Relevant where your supplier code of conduct asks for one.
View the entry
Data provenance
Where our data comes from and who may use it
RUBINLAKE processes profession-related information about companies and their contact persons for B2B sales and recruiting. No consumer data.
Sources
More than one million public and licensed sources, including commercial registers, collected automatically and enriched by analysts and our AI. Processed in our data center in Frankfurt am Main.
Informing the people concerned
Our privacy policy carries the notice under Art. 14 GDPR for everyone in our database: categories of data, sources and legal basis.
Your role as a customer
Your company uses the data under its own data protection responsibility for B2B sales and recruiting. Lawful use is part of the contract.
Objection without an account
Anyone can object to the processing of their data informally and free of charge. A suppression list keeps the data from being added again afterwards.
Platform security
How we protect your account and your data
Encrypted in transit
Every connection between your browser and our systems is TLS-encrypted.
Roles and permissions
Owner, organization admin and member. Billing is a separate permission held by the billing owner alone, and role changes apply immediately.
Confirmed sign-up
New accounts confirm their mobile number with a one-time code sent by SMS. Sign in with a password or your Microsoft account.
No training on your inputs
AI service providers do not use your inputs to train their own or third-party models.
Export on every plan
Export lists as a spreadsheet on any plan. Premium and Enterprise also push to Pipedrive, HubSpot and Zoho CRM.
Delete your account yourself
Each user deletes their account under Account, Profile. Account data is deleted when the contract ends; invoicing records are kept only as long as commercial and tax law require.
Card data stays with Stripe
Payments run through Stripe. Full card details never reach our systems.
Short-lived server logs
Website server logs are deleted after 30 days at the latest, unless a security incident requires longer retention.
Hosting models
Where RUBINLAKE runs for you
By default in our EU cloud in Frankfurt am Main, operated by us. Enterprise customers can also run the platform in a dedicated cloud environment or in their own data center.
- All plans
EU cloud Frankfurt
Operated by RUBINLAKE in Frankfurt am Main. Ready in minutes, updates included.
- Data center in Frankfurt am Main
- Operations and updates by RUBINLAKE
- 7-day free trial, no credit card
- Enterprise
Private Cloud / VPC
A dedicated instance in your own cloud environment or in one reserved for you. Your perimeter, our operations.
- Dedicated instance for your company
- In your cloud account or a reserved environment
- Set up together with our team
- Enterprise
On-Premises
The platform runs in your own data center, for companies whose policies rule out external data storage.
- Runs on your infrastructure
- Your access control and network rules
- Set up together with our team
| EU cloud Frankfurt | Private Cloud / VPC | On-Premises | |
|---|---|---|---|
| Available on | Essential, Premium and Enterprise | Enterprise | Enterprise |
| Operated by | RUBINLAKE | RUBINLAKE, inside your perimeter | Your IT, with our support |
| Data location | Frankfurt am Main | Your cloud environment | Your data center |
| Getting started | Immediately, with the free trial | After a joint setup | After a joint setup |
| Price | From €59 per month | On request | On request |
How we use AI
AI suggests. People decide.
Sources on every signal
Every signal shows its source, trust tier and date, so you can check a report before you act on it.
People make the decision
Lookalikes, matches and answers from the AI assistant are suggestions. Your team decides whom to contact, shortlist or hire.
AI providers as processors
AI model providers work for us as processors, some of them in the USA, under the EU-US Data Privacy Framework or standard contractual clauses. They do not train on your inputs.
EU AI Act
We answer your questions on how our AI features fit the EU AI Act as part of your supplier review.
Recipients
Who else processes data
We name categories of recipients, as the GDPR provides, with the safeguard that applies. On request, we tell you the specific safeguards for the processing that concerns you.
| Category | Purpose | Safeguard |
|---|---|---|
| Hosting and infrastructure | Running the platform and this website | Data processing agreement; for third-country transfers the EU-US Data Privacy Framework or standard contractual clauses |
| AI model providers | AI assistant and AI features | Data processing agreement, Data Privacy Framework or standard contractual clauses; no training on your inputs |
| Data validation and enrichment | Checking and completing contact data | Data processing agreement, Data Privacy Framework or standard contractual clauses |
| Authentication and dispatch | Sign-in, confirmations, security notices and invoices by email and SMS | Data processing agreement, Data Privacy Framework or standard contractual clauses |
| Payment processing (Stripe) | Payments and billing data | Independent controller; Data Privacy Framework |
| Analytics and scheduling (Google Analytics 4, Calendly) | Website statistics and booking appointments | Analytics only with your consent; Data Privacy Framework, for analytics also standard contractual clauses |
Availability and support
Maintenance announced, support by plan
Scheduled maintenance
We carry out maintenance outside usual business hours where possible and announce significant work in advance.
Availability commitment
A specific availability applies where it is agreed in the contract. For Enterprise customers we set it individually.
Support by plan
Essential: email. Premium: email and chat with priority. Enterprise: email, chat and phone with the highest priority.
Documents
Documents for your supplier review
Write to contact@rubinlake.com and tell us what your review needs.
Data processing agreement (Art. 28 GDPR)
Concluded on request, including the technical and organisational measures under Art. 32 GDPR.
EcoVadis scorecard
The full 2024 rating, for your supplier management.
What procurement and data protection ask us
In our EU cloud in Frankfurt am Main. Enterprise customers can also run RUBINLAKE as a Private Cloud in a dedicated cloud environment or on-premises in their own data center.
For B2B sales and recruiting, yes. RUBINLAKE processes only profession-related data from public and licensed sources, informs the people concerned under Art. 14 GDPR and honours objections. Your company uses the data under its own data protection responsibility.
No. Our AI service providers do not use your inputs to train their own or third-party models.
Yes. We conclude a data processing agreement under Art. 28 GDPR on request. Write to contact@rubinlake.com.
Yes, on the Enterprise plan. We offer Private Cloud / VPC and On-Premises individually and set them up together with your team. Book an Enterprise call to discuss your requirements.
The price depends on the hosting model, the number of users and the contract term, and is set in the Enterprise offer. The EU cloud is billed at the prices on our pricing page.
Each user deletes their own account under Account, Profile. Account data is deleted when the contract ends unless a statutory retention duty applies; invoicing records are kept as long as commercial and tax law require. Export your lists before the contract ends.
No. We describe our technical and organisational measures in the data processing agreement. Our environmental, ethics and procurement practices are independently rated by EcoVadis, at Platinum level.
Check us. Then try us.
7 days free in the EU cloud, no credit card. Or talk to us about Private Cloud and On-Premises.