Tenant isolation
Strict multi-tenant isolation down to the database: row-level security separates every tenant, and automated negative tests check exactly that. One customer's data is never visible to another, at any point.
Security & compliance
Your SAP data, protected
Conjola works with sensitive data from your core systems — down to the source code of your custom developments. That is why security is not an afterthought but built into every layer — from authentication to tenant isolation.
Privacy by design
Security is part of the architecture, not a later add-on.
Role-based access
Fine-grained roles control who may see which analyses, modules and datasets — following the principle of least privilege.
Minimal data footprint
We process usage data, structures, aggregated figures and the source code of your custom developments — no individual business documents. Users appear in usage data only pseudonymized, in groups.
OIDC & two-factor
Sign-in via OpenID Connect with a mandatory second factor — including central user and session management.
How the data reaches us
You stay in control of the data flow — through ABAP reports we supply as a transport and you run yourself in your system.
Read-only on your data
The reports only read your business data and never change it. They write solely into Conjola's own configuration tables, which come with the transport.
Source you can inspect
You can review the ABAP source before running it. Nothing runs hidden.
No remote access
You run the reports and upload the extract — we need no access to your system.
Provided at no cost
The extractors are provided free of charge as a transport and run in your system — not part of the license, but your tool for the import.
How your data is protected
Encrypted in transit
Every transfer runs over TLS. Data never leaves the protected channel in plain text.
Controlled access
Access is authenticated and role-based authorized. Even our own operator access is time-limited and only possible with a stated reason.
Immutable audit log
Security-relevant events land in an audit log that cannot be altered afterwards — and that you can export for your own audits.
Defined deletion concept
Retention and deletion are governed by the data processing agreement — with agreed periods.
Compliance
Set up for the requirements of European enterprise customers.
GDPR-compliant
Conjola is built for GDPR requirements — from data minimization through data-subject rights to defined deletion processes.
Data processing agreement
We sign a data processing agreement (DPA) and document the processing transparently and verifiably.
EU hosting
Data storage and processing take place in data centers in the EU. Your data does not leave the European legal area.
AI from Europe
The AI analysis runs on Mistral AI, a European provider. Alternatively, store the key of your own AI contract — then you decide where the requests go.
What we deliberately do NOT need
A small attack surface means: no access we don't need.
No production access
Conjola does not connect to your production system. We work exclusively with the extracts you provide.
No plain-text business content
Where metadata and structures suffice, we do without the full business content of the documents.
No persistent credentials
No SAP credentials are stored with us — you deliver the extracts, we pull nothing.
Ready to understand your SAP landscape?
In a short demo we'll show you how Conjola turns your system data into a basis for decisions.
Book a demo