Question 1

Does PatriotConnect meet the requirements for special categories of personal data (Art. 9 GDPR)?

Accepted Answer

Yes. Special categories of personal data — such as memberships or philosophical beliefs — are handled at the highest protection level: encryption at rest, hierarchical access control through row-level security and organisation graph scopes, plus a complete audit trail. Data subject rights such as access (Art. 15) and erasure (Art. 17) are built directly into the platform.

Question 2

Can PatriotConnect be self-hosted?

Accepted Answer

Yes, entirely. The platform runs self-hosted on premises via Docker or Kubernetes with self-operated dependencies (database, Redis, object storage) — with no vendor lock-in. Alternatively, SaaS operation with multiple tenants is possible.

Question 3

How does multi-tenancy work across the organisational levels?

Accepted Answer

Every node in the organisation graph is a tenant. The parent level sees and manages its sub-units; each sub-unit sees only itself and what is assigned to it. Permissions, templates and content are inherited along the hierarchy — central specifications are distributed but remain locally adaptable.

Question 4

Can individual modules be used separately or left out?

Accepted Answer

The modules are not designed as isolated standalone products, but they are loosely coupled: they communicate only through central contracts and events. Modules can therefore be enabled or disabled as needed without affecting the others.

Question 5

Is the platform accessible?

Accepted Answer

Accessibility to the German public-sector standard BITV 2.0 and to WCAG is part of the foundation. Content is checked live in the editor (contrast, alt text, heading structure), and the AI assists with generating alt text.

Question 6

Is there an API and are there mobile apps?

Accepted Answer

Yes. PatriotConnect is API-first through a documented REST interface with a TypeScript client. Native mobile apps for iOS and Android build on the same API and identity as pure clients.