B2B Privacy
Privacy information for businesses, organisations and education providers using Bestehia.
Updated 7 October 2026: production runs on Hetzner infrastructure in Germany with self-hosted Supabase. AI processing uses the Bestehia API and Mistral AI through api.eu.mistral.ai. Operational B2B kit content is generally deleted after 30 days; compact result records are retained for 24 months by default unless a different lawful instruction is agreed.