Copy
The Crew works on a separate copy of your shop or website. Your live system stays untouched while the work is done.
Security and data protection
Security and data protection with the AI CrewYour data. Your rules. Your live system stays untouched.
For Shopware, Shopify, WooCommerce, Magento, WordPress and TYPO3 · Last updated: October 2026
In brief
The AI Crew never works directly on your live system, but on a copy of your shop or website with anonymised data. The servers are in Germany. Every change goes under version control, a backup is made before every deployment, and only what you approve goes live. That way any earlier state can be restored.
✓ Copy
✓ Anonymised
✓ Servers DE
✓ Rollback
✓ Versioned
Principles
The AI Crew's 5 security principles
Copy, anonymised data, servers in Germany, rollback and version control: these five principles apply to every change to your shop or website.
Anonymised data
In the copy, personal data such as names, email addresses and postal addresses are replaced with placeholders.
Servers in Germany
The servers on which the AI Crew works are located in Germany.
Rollback
The current state is backed up before every deployment. The previous version can be restored at any time.
Version control
Every change is versioned so it can be traced. If you use your own Git, we'll connect it.
Data flow
What happens to your data
Your live system
Real customer and order data. The Crew doesn't work here.
Copy with anonymised data
This is where the Crew develops and tests, on servers in Germany.
Backup & deployment
State backed up, then the approved change goes live.
Only approved changes reach the live system. All work is done exclusively on the copy with anonymised data.
Anonymisation
How personal data is anonymised in the copy
Names, email addresses, postal addresses and phone numbers are replaced with placeholders in the copy.
| Field | Live system | AI Crew copy |
|---|---|---|
| Name | real value, hidden | Customer 0412 |
| real value, hidden | customer0412@example.test | |
| Address | real value, hidden | 1 Sample Street, 12345 Sample Town |
| Phone | real value, hidden | +49 000 0000000 |
Version control and rollback
Every change versioned, every state restorable
v1New contact formBackup ✓
v2Plugin updateBackup ✓
v3New landing pageBackup ✓
v4Checkout adjustmentError detected
Every change is versioned, and a backup is made before every deployment. If something does come up after go-live, the previous state can be restored while the error is fixed on the copy. If you use your own Git, we'll connect it.
Checklist
Checklist: GDPR and data protection with shop and website service providers
You should ask these questions of every service provider who works on your shop or website. The AI Crew's answers:
- Where are the servers located?In Germany
- Is work done directly on the live system?No, always on a copy
- Is work done with real customer data?No, with anonymised data
- Who decides what goes live?Only you, via approval
- Is there a backup before every deployment?Yes
- Is every change under version control?Yes
- Can I use my own Git?Yes, we connect it
FAQ
FAQ on security and data protection
Where are the AI Crew's servers located?
The servers on which the AI Crew works are located in Germany.
Does the AI Crew work with real customer data?
No. The Crew works on a copy of your shop or website in which personal data such as names, email addresses and postal addresses is replaced with placeholders.
Can the AI Crew put changes live without my approval?
No. Nothing goes live without your approval. You see every result on the copy first and then decide.
What happens if something doesn't work after a change?
Before every deployment, the current state is saved in a backup. The previous state can be restored while the error is fixed on the copy.
Is every change under version control?
Yes. Every change is versioned and traceable, so you can see at any time what changed and when, and roll back to earlier versions.
Can I use my own Git repository?
Yes. If you use your own Git, we'll connect it so that your development lives wherever you want it.
What about GDPR and data processing?
Servers in Germany and anonymised data in the copy form the foundation. We'll work out together at the start which data protection documents your company needs, such as a data processing agreement (DPA).
Does this apply to all systems?
Yes, to Shopware, Shopify, WooCommerce, Magento and Adobe Commerce, WordPress and TYPO3. With Shopify, your shop data stays with Shopify as usual, and the Crew works on a theme copy.
Security you can check for yourself
In the demo, we show you the copy, anonymisation, approval and version control on your own system.
Book a demo
