{ "site": { "name": "Fink Labs", "summary": "Fink Labs builds custom software and AI applications for businesses, automating recurring work and connecting the systems teams use.", "languages": ["en", "de"], "machineReadableResources": [ "/llms.txt", "/site-content.md", "/site-content.json", "/sitemap.xml", "/robots.txt" ] }, "routes": [ { "path": "/", "title": "FinkLabs", "description": "Custom software and AI applications for recurring business workflows.", "sections": [ { "id": "hero", "heading": "Your workflows. Less manual work.", "body": [ "Fink Labs builds custom software and AI applications for your business.", "We automate recurring work and connect the systems you use to get it done." ] }, { "id": "process", "heading": "Start with one task. Build a workflow that fits.", "items": [ { "title": "Understand the process", "description": "We clarify which tasks repeat, which data is needed, and where mistakes usually happen." }, { "title": "Build the workflow", "description": "The rules become a workflow that connects to the systems your team already uses." }, { "title": "Put it to work", "description": "We test, hand over, and adjust the workflow until it runs reliably in daily work." } ] }, { "id": "workflow-example", "heading": "From separate documents to a draft you can review", "body": [ "A report needs information from several documents. The preparation can bring the documents together, assign information to the appropriate template sections, and prepare a draft for professional review.", "This is an illustrative example; sources, templates, and review steps are agreed with each customer." ], "inputs": [ "Request.pdf", "Report.pdf", "Notes.docx" ], "output": "Prepared Report.docx draft for review" }, { "id": "savings-calculator", "heading": "Estimate the time you could get back", "body": [ "The calculator estimates time returned from one recurring task based on its duration and weekly frequency." ] }, { "id": "workflow-capabilities", "heading": "What we build into your workflow", "items": [ { "title": "Document processing", "description": "Extract information from documents and prepare it for the next step." }, { "title": "Defined review steps", "description": "Agree where the workflow runs automatically and where your team reviews the result." }, { "title": "Reusable templates", "description": "Prepare reports and documents in the format your team needs." }, { "title": "System connections", "description": "Connect existing systems through the interfaces available to them." } ] }, { "id": "security-controls", "heading": "How we protect your data", "body": [ "Data processing and access rights are agreed for each workflow based on the customer's requirements." ], "items": [ { "title": "Encryption", "description": "Data is encrypted during transfer and storage." }, { "title": "Access control", "description": "Access is limited to authorized people." }, { "title": "Data location", "description": "Hosting and AI inference in the EU." } ] } ] }, { "path": "/security", "title": "Fink Labs Security Center", "description": "How Fink Labs handles customer data.", "sections": [ { "id": "infrastructure", "heading": "How we protect customer data", "body": [ "The backend runs in Germany. AI inference takes place in the EU." ], "principles": [ { "title": "Data stays in agreed regions", "description": "The backend runs in Germany. AI inference takes place in the EU." }, { "title": "Encryption in transit and at rest", "description": "Application data is protected with encrypted transport and encrypted storage infrastructure." }, { "title": "Role-based access control", "description": "Sensitive routes require authenticated roles, and admin actions are recorded for auditability." } ] }, { "id": "compliance-position", "heading": "Infrastructure compliance position", "items": [ { "title": "SOC 2 Type II infrastructure", "description": "Approved cloud services run on provider infrastructure covered by SOC 2 Type II audits." }, { "title": "HIPAA / ISO 27001 control alignment", "description": "Security controls are designed to support customer requirements commonly mapped to HIPAA and ISO 27001 frameworks." }, { "title": "GDPR / revDSG data protection", "description": "Data handling and residency are structured for Swiss and European privacy requirements." } ], "certificationNote": "Fink Labs is not currently SOC 2 certified. Treat SOC 2 references as infrastructure and control alignment unless a certification is explicitly stated." }, { "id": "subprocessors", "heading": "Subprocessors", "items": [ { "name": "Hetzner Online GmbH", "purpose": "Backend hosting and core server infrastructure in Germany.", "dateAdded": "2026-07-13" }, { "name": "Amazon Web Services (AWS)", "purpose": "Cloud infrastructure and related services.", "dateAdded": "2026-02-21" }, { "name": "OpenRouter", "purpose": "AI inference in the EU.", "dateAdded": "2026-09-04" } ] }, { "id": "faq", "heading": "Security FAQ", "items": [ { "question": "Where is your backend hosted?", "answer": "The backend runs on Hetzner infrastructure in Germany, with controlled network access, encrypted storage, and restricted administrative access." }, { "question": "Where does AI inference take place?", "answer": "AI inference takes place in the EU." }, { "question": "Are you SOC 2 compliant?", "answer": "No. Fink Labs is not currently SOC 2 certified. Audit reports held by individual cloud providers do not certify Fink Labs." }, { "question": "Which security standards and regulations do you support?", "answer": "Infrastructure and policies are designed around SOC 2, HIPAA, ISO 27001, revDSG, and GDPR requirements, with documented controls and regular security reviews." }, { "question": "How is customer data protected in transit and at rest?", "answer": "Customer data is protected with encrypted transport, encrypted storage infrastructure, role-based access control, and audit logging for confidentiality, integrity, and traceability." }, { "question": "Do you provide security documentation for procurement and legal review?", "answer": "Documentation such as compliance evidence, a subprocessor overview, and contractual security terms can be provided as part of due diligence and onboarding." } ] } ] }, { "path": "/apply", "title": "Apply - Fink Labs", "description": "Project inquiry form for teams that want to discuss secure workflow automation." } ], "agentGuidance": [ "Use /site-content.json for structured extraction.", "Use /site-content.md or /llms.txt for concise semantic text.", "The visible application is a React single-page app. Browser agents can inspect the rendered UI; curl-only agents should use the machine-readable resources.", "Do not infer certification from compliance alignment. Treat SOC 2, HIPAA, ISO 27001, GDPR and revDSG language as control alignment unless a certification is explicitly stated." ] }