Redundant infrastructure
Modern servers use redundant components, and customer and project data is stored in encrypted, redundant storage.
Security & compliance
Construction software with servers in Germany. ISO 27001, GDPR and an audit trail.
Your project data deserves careful protection. winplan is hosted in Germany at a DIN ISO/IEC 27001-certified data centre in Frankfurt am Main. NetzWerkPlan GmbH is also certified to the standard, with data storage, permissions and an audit trail designed to keep activity traceable.
- Hosted in Germany
- GDPR-compliant
- ISO/IEC 27001
- Audit trail
Frankfurt data centre
Certified to DIN ISO/IEC 27001
Certified to DIN ISO/IEC 27001
Geo-redundant backup
Redundant servers and backup in a second data centre
Redundant servers and backup in a second data centre
TLS encryption
Data transfer over HTTPS using TLS 1.2 and 1.3
Data transfer over HTTPS using TLS 1.2 and 1.3
Roles and permissions
Detailed permissions management in the project room
Detailed permissions management in the project room
Hosting
Hosted in Germany.
The winplan 2.0 servers are hosted at internet service provider Ecotel’s DIN ISO/IEC 27001-certified data centre in Frankfurt am Main. A second data centre provides geographic redundancy to protect availability, integrity and confidentiality.
NetzWerkPlan manages the servers itself, and your project data remains in Germany.
Data centre standard
- Certified to DIN ISO/IEC 27001
- Redundant connection with a direct link to the DE-CIX internet exchange
- Controlled access following registration and authentication
- Technicians present 24 hours a day
- Fire alarm and extinguishing system
- Emergency power generator and uninterruptible power supply
Certification
ISO 27001 certification for information security.
NetzWerkPlan GmbH is certified to the international standard DIN ISO/IEC 27001. This provides a basis for clients who need to assess their suppliers or specify ISO 27001 in a tender, including public clients (in German).
We provide the certificate and further evidence on request. Contact us via the contact form.
At a glance
- NetzWerkPlan GmbH: DIN ISO/IEC 27001
- Frankfurt data centre: DIN ISO/IEC 27001
- Regular penetration tests by external security companies
- Regular checks for security vulnerabilities with analysis tools
Data protection
GDPR-compliant: construction software for sensitive project data.
Data protection is built into how winplan is operated, with German hosting, role-based access, encrypted data transfer and an audit trail. winplan is designed to meet GDPR requirements for projects that need strong data protection and documentation.
We discuss the legal arrangements, including data processing agreements, with you before your project starts.
Data protection measures
- Project data in Germany
- Role-based access to project areas
- SSL/TLS encryption (TLS 1.2 and 1.3)
- Encryption of all file path details
- Encrypted and redundant data storage
Operations
Servers, network and availability.
The servers administered by NetzWerkPlan are designed for reliability and protection against attacks.
Monitoring around the clock
Servers are monitored around the clock at 60-second intervals, with alerts sent immediately through several channels. Server availability is 99.9%, excluding planned maintenance.
Network security
Firewall, IP filters, port scan detection, DoS and DDoS protection, network segmentation, IDS/IPS and IP allow-listing. Updates to the operating system and security-relevant software are checked daily.
Roles, permissions and audit trail
Know who has access and what has changed.
Each project participant is assigned a role and can see only the areas intended for them. You can also share selected plans and documents as packages.
All actions and processes are recorded without gaps, and no information is deleted. Once meeting minutes are completed, they are generated as PDFs that cannot subsequently be changed. This provides a clear record if questions arise about revisions or processes.
- Detailed permissions management per participant and role
- Access with username and password, password policies configurable per company
- Optional two-factor authentication and single sign-on
- Version and status tracking for plans and documents
Roles & permissions
AreaReadReviewApprovePlans✓✓✓Documents✓✓–Defects✓––
Access based on role and project area.
Audit trail
Plan approvedStatus changed
Sent to participantsDistribution documented
New version uploadedPrevious version retained
Every action remains traceable.
Backup & archiving
Daily backups with geographic redundancy.
Data is backed up daily to distributed hard drives. Servers and backups are also available at a geographically separate data centre. On request, a daily backup (run-time archive) can be made to a server belonging to the client.
How backups work
- Daily backup to distributed hard drives
- Redundant servers and backup in a geo-redundant data centre
- Optional: daily run-time archiving to a client’s server
Application security
Regular testing, including independent penetration tests.
The application is regularly checked for vulnerabilities using a range of analysis tools. These checks cover issues such as XSS, insecure cookie handling (HttpOnly and Secure attributes), missing X-Frame headers, autocomplete on sensitive fields and insecure input encoding. External security companies also carry out regular penetration tests.
Read more
Explore the platform and who it serves.
Core platform
winplan
The project room that brings permissions, versions and an audit trail together.
Find out more Who it is forPublic clients
An audit trail, GDPR-compliant operation and hosting in Germany.
Find out more (in German) PlatformPlatform overview
Products and modules of the winplan family at a glance.
To the overview (in German)Frequently asked questions
About security and data protection.
For detailed audits or questionnaires, contact us directly.
Get in touchWhere is winplan data hosted?
The winplan servers are in a DIN ISO/IEC 27001-certified data centre in Frankfurt am Main, Germany. A second, geographically separate data centre provides redundancy for servers and backups.
Is NetzWerkPlan certified to ISO 27001?
Yes, NetzWerkPlan GmbH is certified to DIN ISO/IEC 27001, as is the data centre where the servers are operated. We provide the certificate and further evidence on request.
Is winplan GDPR-compliant?
Yes, winplan is operated in compliance with the GDPR, with hosting in Germany, role-based access and encrypted data transfer. We clarify contractual details such as data processing before the project starts.
How is access managed for external participants?
External participants are assigned a role and can see only the areas shared with them. Two-factor authentication and single sign-on are available as options, and password policies can be set for each company.
How often is data backed up?
Data is backed up daily to distributed hard drives and also held at a geographically separate data centre. Daily run-time archiving to a client’s server is available as an option.
How is project activity documented?
All actions and processes are recorded without gaps, no information is deleted, and completed meeting minutes are generated as PDFs that cannot subsequently be changed.
See how winplan could work for your project.
In 30 minutes, we will show you the workflows that matter to you. There is no obligation.