Per-product transparency
Discovery
Attack surface management and intelligence knowledge graph aggregating findings across customers and engagements.
discovery.eleven11.pro
What we collect, why, and how long
| Data | Purpose | Lawful basis | Retention | Region |
|---|---|---|---|---|
| Audit subjects | Aggregate findings from authorized scans into a cross-target intelligence graph. | Performance of contract | Aggregated patterns retained for the engagement term + 7 years; raw findings inherit the source product's retention. | EU (Germany), EU (Finland) |
Subprocessors involved
| Vendor | Purpose | Region | Conditional | DPA |
|---|---|---|---|---|
| Hetzner Online GmbH | Compute and storage hosting for Eleven11 services | EU (Germany), EU (Finland) | — | Vendor DPA |
| Cloudflare, Inc. | DNS, CDN, edge proxy, and tunneling | Global | — | Vendor DPA |
| Anthropic, PBC | Large language model inference. Used only when a customer has not configured their own BYOK provider; Eleven11 never silently routes BYOK-configured workloads to Anthropic. | United States | Only when no BYOK LLM provider is configured for the workspace. | Vendor DPA |
How to delete your data
Email [email protected]. Discovery findings tied to a deleted customer are anonymized at aggregate; raw rows are deleted.