Trust and security
Your content, your voice, your decision
What you publish is your reputation. Here is where Mediastilo runs, what it does with your content, and why nothing goes out without a person.
The short version
Hosted in the EU
The platform and its database run in Nuremberg, Germany. A few supporting services, such as image storage and email delivery, run on AWS. Every provider is on the sub-processor list.
See the sub-processorsCredentials encrypted
The keys to your WordPress, Ghost or webhook are encrypted at rest with AES-256-GCM, kept per brand, and never shown back in full.
Your content stays yours
Your archive shapes your drafts and nobody else’s. It never trains a model shared with other customers.
A person approves
Drafts wait for your editor. When they reach your site they arrive as drafts by default, with the category, tags and time you choose.
Every fact traceable
Each claim in a draft points to the source it came from, so your editor can check it in seconds.
No lock-in
Export everything you have whenever you ask. Connections are per brand and can be removed at any time.
Human review and the EU AI Act
Built around the editor the law asks for
Since 2 August 2026, Article 50(4) of the EU AI Act requires AI-generated text published to inform the public to be disclosed as such, unless a person has reviewed it and the publisher holds editorial responsibility. Mediastilo is designed so that a person does: nothing publishes without approval, and every fact can be traced to its source.
- Every draft waits for a person to approve it
- Every claim carries its source
- Whether your own process meets the bar is for your editor and your lawyer to confirm
Waiting for your approval
Agency opens applications for small-business energy grants
The energy agency has opened applications for €1.2 million in efficiency grants for small businesses. Firms can apply until 15 October.
- €1.2 million in total Agency notice
- Deadline 15 October Agency notice, call for applications
Questions security teams ask
Where exactly is our data stored?
The platform and its database run in Nuremberg, Germany. Image storage and email delivery use AWS. Every provider, with its location, is on the sub-processor page.
Does our content train your AI models?
No. Your archive is used to shape your drafts only, and never to train a model that serves anyone else.
Can we get everything out if we leave?
Yes. Ask and we export everything you have. Connections to your site can be removed from your side at any time.
Can we sign a data processing agreement?
Yes. We sign a data processing agreement under GDPR Article 28 with any customer who asks, before you start. The DPA page explains what it covers.
Start publishing first.
Set up your sources today, or talk to us about a desk your size.
Prefer to look first? The live showcase is one click away. See it live