[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-\u002Fde\u002Fdocs\u002Fsecurite\u002Faudit-rgpd":3,"docs-nav-de":400},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"body":10,"_type":394,"_id":395,"_source":396,"_file":397,"_stem":398,"_extension":399},"\u002Fde\u002Fdocs\u002Fsecurite\u002Faudit-rgpd","securite",false,"","DSGVO-Audit & Zugriffsprotokoll","Wie betool mandantenübergreifende Zugriffe auf Nutzerinhalte protokolliert und das Auskunftsrecht (Art. 15) sowie das Recht auf Löschung (Art. 17) unterstützt.",{"type":11,"children":12,"toc":384},"root",[13,21,28,33,111,130,136,155,164,169,174,180,193,206,212,234,257,267,273,285,291,303,308,314,333,379],{"type":14,"tag":15,"props":16,"children":17},"element","p",{},[18],{"type":19,"value":20},"text","betool ist darauf ausgelegt, die Anforderungen der DSGVO ohne Behelfslösungen zu erfüllen: Jeder Zugriff auf Nutzerinhalte durch einen Agenten, der einer anderen Organisation angehört, wird protokolliert, und jede Organisation kann ihr eigenes Protokoll einsehen.",{"type":14,"tag":22,"props":23,"children":25},"h2",{"id":24},"das-zugriffsprotokoll",[26],{"type":19,"value":27},"Das Zugriffsprotokoll",{"type":14,"tag":15,"props":29,"children":30},{},[31],{"type":19,"value":32},"Eine dedizierte Tabelle erfasst für jeden mandantenübergreifenden Zugriff:",{"type":14,"tag":34,"props":35,"children":36},"ul",{},[37,43,56,67,72,84,106],{"type":14,"tag":38,"props":39,"children":40},"li",{},[41],{"type":19,"value":42},"Den Zeitstempel",{"type":14,"tag":38,"props":44,"children":45},{},[46,48,54],{"type":19,"value":47},"Die ",{"type":14,"tag":49,"props":50,"children":51},"strong",{},[52],{"type":19,"value":53},"Ziel",{"type":19,"value":55},"-Organisation (deren Inhalt gelesen wurde)",{"type":14,"tag":38,"props":57,"children":58},{},[59,60,65],{"type":19,"value":47},{"type":14,"tag":49,"props":61,"children":62},{},[63],{"type":19,"value":64},"lesende",{"type":19,"value":66}," Organisation (typischerweise der Anbieter)",{"type":14,"tag":38,"props":68,"children":69},{},[70],{"type":19,"value":71},"Den Nutzer, der den Lesevorgang ausgelöst hat",{"type":14,"tag":38,"props":73,"children":74},{},[75,77,82],{"type":19,"value":76},"Das ",{"type":14,"tag":49,"props":78,"children":79},{},[80],{"type":19,"value":81},"Tool",{"type":19,"value":83},", über das der Lesevorgang erfolgt ist",{"type":14,"tag":38,"props":85,"children":86},{},[87,89,96,98,104],{"type":19,"value":88},"Den Entitätstyp (geschlossenes Vokabular: ",{"type":14,"tag":90,"props":91,"children":93},"code",{"className":92},[],[94],{"type":19,"value":95},"context",{"type":19,"value":97}," für eine Konversation, ",{"type":14,"tag":90,"props":99,"children":101},{"className":100},[],[102],{"type":19,"value":103},"scenario",{"type":19,"value":105}," für einen Benchmark)",{"type":14,"tag":38,"props":107,"children":108},{},[109],{"type":19,"value":110},"Die ID der gelesenen Entität (und den genauen Exchange, wenn der Lesevorgang einen einzelnen Gesprächsschritt betrifft)",{"type":14,"tag":15,"props":112,"children":113},{},[114,116,121,123,128],{"type":19,"value":115},"Das Entitätsvokabular ist ",{"type":14,"tag":49,"props":117,"children":118},{},[119],{"type":19,"value":120},"auf Datenbankebene geschlossen",{"type":19,"value":122}," (CHECK-Constraint) und ",{"type":14,"tag":49,"props":124,"children":125},{},[126],{"type":19,"value":127},"auf Codeebene geschlossen",{"type":19,"value":129}," (Anwendungs-Whitelist). Einen Typ hinzufügen = neue Migration + Aktualisierung der Whitelist. Keine überraschenden Einträge.",{"type":14,"tag":22,"props":131,"children":133},{"id":132},"auskunftsrecht-artikel-15",[134],{"type":19,"value":135},"Auskunftsrecht (Artikel 15)",{"type":14,"tag":15,"props":137,"children":138},{},[139,141,146,148,153],{"type":19,"value":140},"Jede Organisation kann IHRE EIGENEN Zugriffsprotokolle unter ",{"type":14,"tag":49,"props":142,"children":143},{},[144],{"type":19,"value":145},"Organisationseinstellungen → Datenschutz",{"type":19,"value":147}," (Abschnitt ",{"type":14,"tag":49,"props":149,"children":150},{},[151],{"type":19,"value":152},"Zugriffsverlauf",{"type":19,"value":154},") einsehen oder über:",{"type":14,"tag":156,"props":157,"children":159},"pre",{"code":158},"GET \u002Fapi\u002Fadmin\u002Fme\u002Fsupervisor-reads\n",[160],{"type":14,"tag":90,"props":161,"children":162},{"__ignoreMap":7},[163],{"type":19,"value":158},{"type":14,"tag":15,"props":165,"children":166},{},[167],{"type":19,"value":168},"Die Route liefert die Lesevorgänge in absteigender chronologischer Reihenfolge (bis zu 1 000 Einträge pro Aufruf).",{"type":14,"tag":15,"props":170,"children":171},{},[172],{"type":19,"value":173},"Kein organisationsübergreifender Zugriff auf das Audit: Der Anbieter sieht niemals die Audit-Protokolle des Kunden.",{"type":14,"tag":22,"props":175,"children":177},{"id":176},"recht-auf-löschung-artikel-17",[178],{"type":19,"value":179},"Recht auf Löschung (Artikel 17)",{"type":14,"tag":15,"props":181,"children":182},{},[183,185,191],{"type":19,"value":184},"Die Architektur macht die Löschung sauber durchführbar: Alle Daten einer Organisation sind ihrer ",{"type":14,"tag":90,"props":186,"children":188},{"className":187},[],[189],{"type":19,"value":190},"org_id",{"type":19,"value":192}," zugeordnet (Fachtabellen, Dateiordner, Secrets), was eine gezielte Löschung ermöglicht — ein bestimmter Nutzer, eine bestimmte Konversation oder die gesamte Organisation —, ohne den Rest anzutasten.",{"type":14,"tag":15,"props":194,"children":195},{},[196,198,204],{"type":19,"value":197},"Löschanträge (Artikel 17) werden mit unserem Support bearbeitet: Schreiben Sie an ",{"type":14,"tag":90,"props":199,"children":201},{"className":200},[],[202],{"type":19,"value":203},"contact@betool.fr",{"type":19,"value":205}," von einem Administratorkonto der betreffenden Organisation aus.",{"type":14,"tag":22,"props":207,"children":209},{"id":208},"mandantenübergreifendes-lese-opt-in-opt-out",[210],{"type":19,"value":211},"Mandantenübergreifendes Lese-Opt-in & Opt-out",{"type":14,"tag":15,"props":213,"children":214},{},[215,217,226,228,232],{"type":19,"value":216},"Standardmäßig ist das mandantenübergreifende Lese-Opt-in auf ",{"type":14,"tag":49,"props":218,"children":219},{},[220],{"type":14,"tag":90,"props":221,"children":223},{"className":222},[],[224],{"type":19,"value":225},"FALSE",{"type":19,"value":227}," gesetzt. Ein Administrator der Organisation kann es unter ",{"type":14,"tag":49,"props":229,"children":230},{},[231],{"type":19,"value":145},{"type":19,"value":233}," aktivieren — und jederzeit widerrufen.",{"type":14,"tag":34,"props":235,"children":236},{},[237,247],{"type":14,"tag":38,"props":238,"children":239},{},[240,245],{"type":14,"tag":49,"props":241,"children":242},{},[243],{"type":19,"value":244},"Deaktiviert",{"type":19,"value":246}," — Standard. Der Anbieter kann auf keinen Inhalt dieser Organisation zugreifen. Konsequenz: Kein organisationsübergreifender Support zu inhaltsbezogenen Fragen möglich (struktureller Support bleibt möglich).",{"type":14,"tag":38,"props":248,"children":249},{},[250,255],{"type":14,"tag":49,"props":251,"children":252},{},[253],{"type":19,"value":254},"Aktiviert",{"type":19,"value":256}," — der Supervisor kann die Konversationen der Organisation zur Diagnose lesen, wobei jeder Zugriff auditiert und für die Organisation einsehbar ist.",{"type":14,"tag":15,"props":258,"children":259},{},[260,265],{"type":14,"tag":49,"props":261,"children":262},{},[263],{"type":19,"value":264},"Der Anbieter kann dieses Opt-in NICHT im Namen des Kunden aktivieren.",{"type":19,"value":266}," Das ist ein grundlegender Test: Wenn der Anbieter es ohne Aktion des Kunden umschalten kann, ist die Architektur defekt.",{"type":14,"tag":22,"props":268,"children":270},{"id":269},"schutzvorrichtung-für-destruktive-operationen",[271],{"type":19,"value":272},"Schutzvorrichtung für destruktive Operationen",{"type":14,"tag":15,"props":274,"children":275},{},[276,278,283],{"type":19,"value":277},"Jede Operation, die Inhalte zerstört oder ersetzt (DELETE, REPLACE-IN-PLACE), wird ",{"type":14,"tag":49,"props":279,"children":280},{},[281],{"type":19,"value":282},"am Validator verweigert",{"type":19,"value":284},", wenn die Zielorganisation das Lese-Opt-in nicht aktiviert hat. Begründung: Ohne Sichtbarkeit würde der Operator blind eine Nutzlast vorschlagen, die bestehende Inhalte überschreiben würde.",{"type":14,"tag":22,"props":286,"children":288},{"id":287},"kaskadierende-verweigerung-wenn-das-audit-nicht-verfügbar-ist",[289],{"type":19,"value":290},"Kaskadierende Verweigerung, wenn das Audit nicht verfügbar ist",{"type":14,"tag":15,"props":292,"children":293},{},[294,296,301],{"type":19,"value":295},"Ist die Audit-Datenbank nicht verfügbar (Infrastrukturvorfall), werden alle mandantenübergreifenden Lesevorgänge ",{"type":14,"tag":49,"props":297,"children":298},{},[299],{"type":19,"value":300},"verweigert",{"type":19,"value":302},". Strikte Richtlinie: kein Lesevorgang ohne Nachweis.",{"type":14,"tag":15,"props":304,"children":305},{},[306],{"type":19,"value":307},"Codeseitige Konsequenz: Ein Aufrufer, der eine Ausnahme abfängt, muss den Audit-Fehler vor jeder fachlichen Verarbeitung erneut auslösen. Dies ist eine Invariante, die vom Sicherheits-Benchmark getestet wird.",{"type":14,"tag":22,"props":309,"children":311},{"id":310},"consent-cookies",[312],{"type":19,"value":313},"Consent-Cookies",{"type":14,"tag":15,"props":315,"children":316},{},[317,319,324,326,331],{"type":19,"value":318},"Die Marketing-Website (betool.ai) misst ihre Reichweite mit ",{"type":14,"tag":49,"props":320,"children":321},{},[322],{"type":19,"value":323},"Google Analytics 4",{"type":19,"value":325}," im ",{"type":14,"tag":49,"props":327,"children":328},{},[329],{"type":19,"value":330},"Consent Mode v2",{"type":19,"value":332},":",{"type":14,"tag":34,"props":334,"children":335},{},[336,355,367],{"type":14,"tag":38,"props":337,"children":338},{},[339,341,346,348,353],{"type":19,"value":340},"Standardmäßig sind alle Google-Einwilligungen (Messung, Werbung) auf ",{"type":14,"tag":49,"props":342,"children":343},{},[344],{"type":19,"value":345},"abgelehnt",{"type":19,"value":347}," gesetzt: Das Google-Analytics-Skript wird ",{"type":14,"tag":49,"props":349,"children":350},{},[351],{"type":19,"value":352},"nicht geladen",{"type":19,"value":354},", und es wird kein Analyse-Cookie gesetzt.",{"type":14,"tag":38,"props":356,"children":357},{},[358,360,365],{"type":19,"value":359},"Das Skript wird erst geladen und die Messung erst aktiviert, ",{"type":14,"tag":49,"props":361,"children":362},{},[363],{"type":19,"value":364},"nachdem Sie der Reichweitenmessung im Banner ausdrücklich zugestimmt haben",{"type":19,"value":366},".",{"type":14,"tag":38,"props":368,"children":369},{},[370,372,377],{"type":19,"value":371},"Sie können diese Einwilligung jederzeit widerrufen (",{"type":14,"tag":49,"props":373,"children":374},{},[375],{"type":19,"value":376},"Cookies verwalten",{"type":19,"value":378},", in der Fußzeile): Die Messung wird dann wieder auf abgelehnt gesetzt.",{"type":14,"tag":15,"props":380,"children":381},{},[382],{"type":19,"value":383},"Die Einwilligungen für Werbung bleiben abgelehnt: Die Website betreibt kein Werbe-Targeting.",{"title":7,"searchDepth":385,"depth":385,"links":386},2,[387,388,389,390,391,392,393],{"id":24,"depth":385,"text":27},{"id":132,"depth":385,"text":135},{"id":176,"depth":385,"text":179},{"id":208,"depth":385,"text":211},{"id":269,"depth":385,"text":272},{"id":287,"depth":385,"text":290},{"id":310,"depth":385,"text":313},"markdown","content:de:docs:5.securite:3.audit-rgpd.md","content","de\u002Fdocs\u002F5.securite\u002F3.audit-rgpd.md","de\u002Fdocs\u002F5.securite\u002F3.audit-rgpd","md",[401],{"title":402,"_path":403,"children":404},"De","\u002Fde",[405],{"title":406,"_path":407,"children":408},"Docs","\u002Fde\u002Fdocs",[409,422,450,478,491,505,518,579],{"title":410,"_path":411,"children":412},"Erste Schritte","\u002Fde\u002Fdocs\u002Fdemarrer",[413,416,419],{"title":414,"_path":415},"Willkommen","\u002Fde\u002Fdocs\u002Fdemarrer\u002Fbienvenue",{"title":417,"_path":418},"Ein Konto erstellen","\u002Fde\u002Fdocs\u002Fdemarrer\u002Fcreer-un-compte",{"title":420,"_path":421},"Einen LLM-Schlüssel anbinden","\u002Fde\u002Fdocs\u002Fdemarrer\u002Fbrancher-llm",{"title":423,"_path":424,"children":425},"Kanäle","\u002Fde\u002Fdocs\u002Fcanaux",[426,429,432,435,438,441,444,447],{"title":427,"_path":428},"Überblick über die Kanäle","\u002Fde\u002Fdocs\u002Fcanaux\u002Fvue-densemble",{"title":430,"_path":431},"Echtzeit-Telefonie","\u002Fde\u002Fdocs\u002Fcanaux\u002Ftelephone",{"title":433,"_path":434},"E-Mail","\u002Fde\u002Fdocs\u002Fcanaux\u002Femail",{"title":436,"_path":437},"Web-Chat-Widget","\u002Fde\u002Fdocs\u002Fcanaux\u002Fchat-widget",{"title":439,"_path":440},"HTTP-Webhook","\u002Fde\u002Fdocs\u002Fcanaux\u002Fwebhook",{"title":442,"_path":443},"Messaging (WhatsApp, Messenger, Telegram, Mattermost)","\u002Fde\u002Fdocs\u002Fcanaux\u002Fmessageries",{"title":445,"_path":446},"Meta Lead Ads","\u002Fde\u002Fdocs\u002Fcanaux\u002Ffacebook-leads",{"title":448,"_path":449},"Schedule (Cron)","\u002Fde\u002Fdocs\u002Fcanaux\u002Fschedule",{"title":451,"_path":452,"children":453},"Pipelines","\u002Fde\u002Fdocs\u002Fpipelines",[454,457,460,463,466,469,472,475],{"title":455,"_path":456},"Der visuelle Editor","\u002Fde\u002Fdocs\u002Fpipelines\u002Fediteur-visuel",{"title":458,"_path":459},"KI-Agents","\u002Fde\u002Fdocs\u002Fpipelines\u002Fagents",{"title":461,"_path":462},"Deterministische Operatoren","\u002Fde\u002Fdocs\u002Fpipelines\u002Foperateurs",{"title":464,"_path":465},"Flusssteuerung","\u002Fde\u002Fdocs\u002Fpipelines\u002Fcontrole-flux",{"title":467,"_path":468},"Code-Steps","\u002Fde\u002Fdocs\u002Fpipelines\u002Fcode-step",{"title":470,"_path":471},"Sub-Pipelines","\u002Fde\u002Fdocs\u002Fpipelines\u002Fsous-pipelines",{"title":473,"_path":474},"No-Code-Aktionen","\u002Fde\u002Fdocs\u002Fpipelines\u002Factions-no-code",{"title":476,"_path":477},"Wissensdatenbank","\u002Fde\u002Fdocs\u002Fpipelines\u002Fbase-de-connaissances",{"title":479,"_path":480,"children":481},"Überwachung","\u002Fde\u002Fdocs\u002Fsupervision",[482,485,488],{"title":483,"_path":484},"Ausführungsverlauf","\u002Fde\u002Fdocs\u002Fsupervision\u002Fexecutions",{"title":486,"_path":487},"Credits & Metering","\u002Fde\u002Fdocs\u002Fsupervision\u002Fcredits-metering",{"title":489,"_path":490},"Benchmarks","\u002Fde\u002Fdocs\u002Fsupervision\u002Fbenchmarks",{"title":492,"_path":493,"children":494},"Sicherheit","\u002Fde\u002Fdocs\u002Fsecurite",[495,498,501,502],{"title":496,"_path":497},"Sicherheitsprinzipien","\u002Fde\u002Fdocs\u002Fsecurite\u002Fprincipes",{"title":499,"_path":500},"Strikte Mandantentrennung","\u002Fde\u002Fdocs\u002Fsecurite\u002Fmulti-tenant",{"title":8,"_path":4},{"title":503,"_path":504},"Souveräne Bereitstellung","\u002Fde\u002Fdocs\u002Fsecurite\u002Fdeploiement-souverain",{"title":506,"_path":507,"children":508},"Entwickler","\u002Fde\u002Fdocs\u002Fdeveloppeurs",[509,512,515],{"title":510,"_path":511},"Admin-API","\u002Fde\u002Fdocs\u002Fdeveloppeurs\u002Fapi-admin",{"title":513,"_path":514},"Ausgehende Webhooks","\u002Fde\u002Fdocs\u002Fdeveloppeurs\u002Fwebhooks-sortants",{"title":516,"_path":517},"betool von Claude aus steuern (MCP)","\u002Fde\u002Fdocs\u002Fdeveloppeurs\u002Fmcp",{"title":519,"_path":520,"children":521},"Integrationen","\u002Fde\u002Fdocs\u002Fintegrations",[522,525,528,531,534,537,540,543,546,549,552,555,558,561,564,567,570,573,576],{"title":523,"_path":524},"Integrationen im Überblick","\u002Fde\u002Fdocs\u002Fintegrations\u002Fvue-densemble",{"title":526,"_path":527},"Stripe","\u002Fde\u002Fdocs\u002Fintegrations\u002Fstripe",{"title":529,"_path":530},"GitHub","\u002Fde\u002Fdocs\u002Fintegrations\u002Fgithub",{"title":532,"_path":533},"Google","\u002Fde\u002Fdocs\u002Fintegrations\u002Fgoogle",{"title":535,"_path":536},"LinkedIn Ads","\u002Fde\u002Fdocs\u002Fintegrations\u002Flinkedin-ads",{"title":538,"_path":539},"Kavkom","\u002Fde\u002Fdocs\u002Fintegrations\u002Fkavkom",{"title":541,"_path":542},"Jira","\u002Fde\u002Fdocs\u002Fintegrations\u002Fjira",{"title":544,"_path":545},"Slack","\u002Fde\u002Fdocs\u002Fintegrations\u002Fslack",{"title":547,"_path":548},"SMS","\u002Fde\u002Fdocs\u002Fintegrations\u002Fsms",{"title":550,"_path":551},"Enable Banking (Open Banking)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fenable-banking",{"title":553,"_path":554},"CRM, Marketing & Produktivität","\u002Fde\u002Fdocs\u002Fintegrations\u002Fcrm-marketing",{"title":556,"_path":557},"HeyGen (Video)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fheygen",{"title":559,"_path":560},"La Poste","\u002Fde\u002Fdocs\u002Fintegrations\u002Fla-poste",{"title":562,"_path":563},"Branchen-CRM (beTool Application, Qhare)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fcrm-metier",{"title":565,"_path":566},"Mitti (Vor-Ort-Inspektionen)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fmitti",{"title":568,"_path":569},"Meta (Messenger, Seiten, Meta Ads)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fmeta",{"title":571,"_path":572},"Onoff Business (Beta)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fonoff",{"title":574,"_path":575},"Smart Life \u002F Tuya (vernetzte Geräte)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fsmart-life",{"title":577,"_path":578},"beTool-Produkte (Desktop, Kiosk, Terminal)","\u002Fde\u002Fdocs\u002Fintegrations\u002Fproduits-betool",{"title":580,"_path":581,"children":582},"Anwendungsfälle","\u002Fde\u002Fdocs\u002Fcas-usage",[583,586,589,592,595,598],{"title":584,"_path":585},"Typische Fachagenten","\u002Fde\u002Fdocs\u002Fcas-usage\u002Fvue-densemble",{"title":587,"_path":588},"CFO IA","\u002Fde\u002Fdocs\u002Fcas-usage\u002Fcfo-ia",{"title":590,"_path":591},"COO IA","\u002Fde\u002Fdocs\u002Fcas-usage\u002Fcoo-ia",{"title":593,"_path":594},"CTO IA","\u002Fde\u002Fdocs\u002Fcas-usage\u002Fcto-ia",{"title":596,"_path":597},"Product Manager IA","\u002Fde\u002Fdocs\u002Fcas-usage\u002Fproduct-manager-ia",{"title":599,"_path":600},"Persönlicher Assistent","\u002Fde\u002Fdocs\u002Fcas-usage\u002Fassistant-personnel"]