Security
Built for the most confidential data there is.
ISO 27001, ISO 42001 and GDPR. EU hosting with Hetzner in Germany. An audit trail with tamper detection. Levano is ready for bar association audits.
EU hosting
Denmark
Encryption
AES-256 · TLS 1.3
Audit trail
HMAC-signed
2FA
Mandatory
continuous monitoring100%Defence in depth
Security in every layer.
From the connection down to the individual cell in the database. Every layer is built so no one sees more than they should, and nothing is lost.
Encrypted in transit.
Encrypted at rest.
Every connection runs on TLS 1.3, and all data sits encrypted with AES-256. The most sensitive fields get one more layer.
- TLS 1.3 for all connections
- AES-256 for all data at rest
- Field-level encryption for national ID and payment data
- HMAC-signed audit logs with tamper-detection
No one sees more than
they should.
Access follows the role: partner, lawyer, associate, secretary, bookkeeper, client. And every action leaves a trace.
- Role-based access control (RBAC)
- Mandatory 2FA: TOTP, SMS, national eID when enabled
- Microsoft SSO with existing Entra ID groups
- Ethical walls between teams and an audit trail on everything
Daily backup.
90-day retention.
Should the worst happen, the way back is short. Backups run automatically every day and are tested as a routine, not an assumption.
- Daily automatic backup, point-in-time recovery
- 90-day retention, geo-replicated within Western Europe
- RTO under 4 hours, RPO under 1 hour
- Annual disaster recovery tests
Certifications and standards
It isn't marketing. It's documentation.
ISO/IEC 27001:2022
Information security
ISO/IEC 42001
AI Management Systems
GDPR
EU data protection
SOC 2 Type II
Independent audit
EU hosting
German servers
Data residency
EU hosting. German servers.
Levano runs on Hetzner in Germany. The database sits physically in Nuremberg, and backup replicas live in Falkenstein. No customer data leaves the EU.
- Primary database
- Nuremberg, Germany
- Backup replicas
- Falkenstein, Germany
- Transfer outside the EU
- None
AI security
The AI doesn't train on your data.
Levano uses Anthropic Claude via Enterprise with Zero Data Retention. It's the first question lawyers ask about AI, so here's the short answer: your data is used to answer you, and then it's gone.
- Prompts and data are deleted immediately after the answer is delivered
- Anthropic never trains on your input
- No long-term storage of your conversations
- Citations provide sources so you can verify the answer
- ISO 42001 specifically covers AI Management Systems
If the law changes (e.g. the EU AI Act), we update the setup.
- 1
Your prompt
Leaves the EU briefly
- 2
Claude responds
Used only to answer you
- 3
Data deleted
Zero Data Retention
Compliance
We meet the requirements from day one.
Levano is built for Danish lawyers. That means the rules aren't something we adapt to afterwards. They're part of the foundation.
The Danish Bar and Law Society
Full compliance with the bar association's quality framework. The audit trail is ready for quality audits.
GDPR
Data processing agreement as standard, retention policies and atomic deletion.
AML legislation
Risk assessment, PEP checks and monitoring of suspicious activity.
Client account rules
Separated account management with automatic reconciliation.
Security regulations
Met for public-sector customers and institutions.
Trust Center
Get all the documentation.
ISO certificates, the DPA, sub-processor list, penetration test reports, SLA and incident response process. Download directly where possible, or request the full pack.
Ask our team
Questions about security?
Security questions are handled directly by our tech team. CTO Victor Brøgger is responsible. Write to us and you'll hear from a person, not a form.
Victor Brøgger · CTO, Levano
FAQ
Questions about security.
Ready to leave on time?
Levano opens to new pilot firms in Q4 2026. Join the waitlist now and be among the first to get access.
Want to see it first? Book a demo
Secure your spot
Join the waitlist. We will send an invitation when pilot access opens.
- No commitment
- Takes 2 minutes
- Reply within 24 hours