Secure. Compliant.
EU-based.
The Marketing Management Cockpit protects your data and meets regulatory requirements to strict European standards.
Stability and security come first
We take security seriously. As a SaaS provider we hold clear certifications, make deliberate infrastructure decisions and apply consistent data protection standards.
The Marketing Management Cockpit meets the requirements of regulated industries: from access control and encrypted data processing through to audit-proof logging.
Certified by independent bodies
Our ISO certifications are issued by IT-ZERT and document our institutional security standards.
- ISO 27001:2013 - Information security management system. Covers the confidentiality, integrity and availability of all information processed.
- ISO 9001:2015 - Quality management system. Defined and controlled processes in development, operations and customer projects.
Servers located in Germany
MMC runs on our private cloud by default. For companies with heightened data protection requirements, hosting on our own infrastructure in Germany secures full data sovereignty and GDPR-compliant processing. Hosting and operation in public cloud systems at external German data centers are available as an alternative.
Brands like these trust the Marketing Management Cockpit
GDPR compliance with no room for interpretation
Hosting in Germany, contracts under German law. No data passed to third parties without a documented legal basis. MMC is built so that the people responsible for GDPR in your organization get concrete answers.
- A data processing agreement (DPA) is ready for signature
- Anonymization of personal data and exports of company data are built into the processes
- Customers in regulated industries such as financial services and healthcare benefit from audit-proof logging
Compliant with the EU AI Act
The EU AI Act requires transparency and documentation wherever AI is used. MMC meets those requirements: every AI-supported process in the system is classified, documented and traceable.
Which AI models are used and which data they process is agreed before you start.
Integrations that respect your IT policies
The Marketing Management Cockpit connects to existing IT landscapes through standardized APIs without breaking your security perimeter. All interfaces follow enterprise security standards.
- RESTful APIs with OAuth 2.0 and API key management
- Webhook-based integrations for event-driven architectures
- SAML 2.0 single sign-on for identity providers (Active Directory, Okta and others)
- Documented API endpoints with OpenAPI/Swagger specification
Technical security at system and application level
The Marketing Management Cockpit does not stop at infrastructure-level security. Encryption, access control and monitoring work together at application level.
Access controlThe system grants permissions granularly: by role, module, project and partner. External agencies and service providers work directly in the system with graduated access rights. Data that is not relevant to them stays out of reach. Single sign-on (SSO) via ADFS, SAML2 and OAuth is available.
EncryptionMMC encrypts data in transit and at rest. Communication between client and system runs exclusively over encrypted connections.
Monitoring & incident responseMMC logs security-relevant events. Every access, every status change and every permission change carries a timestamp and a named owner. Automatically and without gaps.
Audit readinessMMC stores every decision and change with a complete version history. Audit trails are available on request, with no manual preparation.
Regulated industries rely on MMC
Banks, insurers, healthcare and automotive companies work under particularly strict compliance requirements. The Marketing Management Cockpit is already in use in highly regulated environments.
Banks and financial servicesBaFin compliance
InsuranceVAG and Solvency II requirements
HealthcareFDA, MDR, pharmacovigilance guidelines
AutomotiveVDA standards
Public sector clientsProcurement law, IT security catalog
Frequently asked questions about marketing software compliance
Yes. We provide a data processing agreement (DPA) as standard, run servers exclusively in Germany and have implemented all technical and organizational measures.
