# Fink Labs

> Fink Labs builds custom software and AI applications for businesses. The company automates recurring work and connects the systems teams use to complete it.

## Primary Pages

- [Home](/): Custom software and AI applications for recurring business workflows.
- [Security](/security): Security architecture, data residency posture, processor controls, audit logging, encryption, and compliance alignment.
- [Apply](/apply): Project inquiry form.

## Machine-Readable Resources

- [Structured site content JSON](/site-content.json)
- [Markdown site content](/site-content.md)
- [Sitemap](/sitemap.xml)
- [Robots policy](/robots.txt)

## Core Offering

Fink Labs starts with one recurring task, maps the process, builds a workflow around the systems already in use, and adjusts it until it works in daily operations.

An illustrative document workflow brings source documents together, assigns information to the appropriate template sections, and prepares a draft for professional review.

The workflow delivery process is:

1. Understand the process: clarify which tasks repeat, which data is needed, and where mistakes usually happen.
2. Build the workflow: turn rules into a workflow that connects to systems the team already uses.
3. Put it to work: test, hand over, and adjust the workflow until it runs reliably in daily work.

## Capabilities

- Document processing: extract information from documents and prepare it for the next step.
- Defined review steps: agree where automation runs and where a team reviews the result.
- Reusable templates: prepare reports and documents in the format a team needs.
- System connections: connect existing systems through their available interfaces.

## Security Summary

Data processing and access rights are agreed for each workflow based on the customer's requirements.

- Encryption: data is encrypted during transfer and storage.
- Access control: access is limited to authorized people.
- Data location: hosting and AI inference in the EU.

Fink Labs is not currently SOC 2 certified. Audit reports held by individual cloud providers do not certify Fink Labs.

## Security FAQ

### Where is the backend hosted?

The backend runs on Hetzner infrastructure in Germany, with controlled network access, encrypted storage, and restricted administrative access.

### Where does AI inference take place?

AI inference takes place in the EU.

### How is customer data protected?

Customer data is protected through encrypted transport, encrypted storage infrastructure, role-based access control, and audit logging for sensitive actions.

## Agent Guidance

- Prefer `/site-content.json` for structured extraction.
- Prefer `/site-content.md` or this file for concise semantic text.
- The main application is a React single-page app. Browser agents can inspect the rendered UI, but curl-only agents should use these machine-readable resources.
- Do not infer certification from compliance alignment. Treat SOC 2, HIPAA, ISO 27001, GDPR and revDSG language as control alignment unless a certification is explicitly stated.