What security measures protect data transfer?

All data transfers are encrypted via TLS. API access is authenticated via OAuth 2.0 or API keys and protected by rate limiting. IP whitelisting restricts access to defined servers. All transactions are logged for audit purposes. Integration services run on servers in German data centers and are subject to GDPR. Personal data is stored only as long as required for the processing purpose.