Compliance

We process personal data in line with the GDPR (DSGVO). See our Privacy Policy and Data Processing Agreement for the controller/processor model, legal bases, and data subject rights.

Accounting preparation is designed to support the German Principles for Proper Bookkeeping (GoBD) and the proper retention of digital records. Exports are structured and traceable; originals are never overwritten — corrections create new versions with audit links.

LeadersMind prepares — it does not finally book. VAT and DATEV exports are validated but require approval by an authorized accounting role and professional review before external submission.

Append-only audit logs, version-controlled documents, and separation of duties support audit traceability. Export of audit data is available to authorized auditors only.

Retention follows legal requirements (e.g., § 147 AO, § 257 HGB — up to 10 years). Retention-protected documents cannot be deleted by normal processes.

AI outputs are recommendations, not automated decisions. Human oversight is enforced for high-risk actions. See Responsible AI.

Security-sensitive events are logged in an append-only audit trail. Internal security details are not exposed to ordinary users.

Granular, role-based permissions control access to documents, financial data, conversations, company memory, and tasks. External advisers receive organization-specific grants only.

We are pursuing SOC 2 and ISO/IEC 27001 certifications. [Status: in progress.]