Buildsimple has passed the AWS Foundational Technical Review (FTR) and has thus earned the status of AWS Qualified Software. AWS classifies the FTR as a review designed to identify and mitigate technical risks; it assesses key requirements in the areas of security, reliability, and operational excellence.

Because an external review improves the basis for assessment. For internal audit processes, it is crucial that the architecture, operating model, and supporting documentation are in place so that risks can be assessed with confidence. Buildsimple explicitly highlights this connection on its AWS Qualified Software page in relation to compliance, security, and IT governance.

Buildsimple publicly documents several security and compliance measures: ISO 27001, security and compliance information, hosting of the product infrastructure in Frankfurt am Main, secure HTTPS interfaces, and use in companies regulated by BaFin. In addition, Buildsimple references a C5-certified cloud in Frankfurt am Main (AWS).

For European customers, hosting takes place in Frankfurt am Main (eu-central-1), which is also the processing region in the standard setup. When using large language models (LLMs), processing may also take place in other EU countries, depending on the model and setup used. The public Buildsimple page lists Frankfurt am Main as the hosting location for the product infrastructure.

Among other things, the following are publicly disclosed: ISO 27001, the GDPR, an AVV process, details regarding hosting and data processing, AWS as a subprocessor, as well as publicly available references and certifications. Buildsimple specifically highlights these credentials in the context of its successful AWS FTR certification.

Buildsimple does not rely exclusively on a single AI method, but instead selects the most appropriate approach for each use case from among self-trained machine learning and deep learning models, foundation models, large language models (LLMs), as well as AI agents and AI-based processes. Technical, domain-specific, and economic factors play a decisive role in this decision-making process.

While large language models are highly effective at handling complex linguistic tasks, they also have drawbacks: higher latency, decision-making logic that is harder to explain, high infrastructure requirements, and pricing trends that are difficult to predict. Small, specialized ML models are more stable, transparent, and cost-effective in many big data scenarios.

Buildsimple employs a hybrid architecture: approximately 80% specialized small models for large-scale data and approximately 20% large language models for complex cases. The goal is greater controllability, consistent quality, and more cost-effective production operations.

Key components include versioning, staging, monitoring, and quality assurance; human-in-the-loop mechanisms for reviewing and correcting erroneous decisions; as well as transparency, traceability, and explainability. These elements are described as non-optional.

Because documentation, architectural information, and operational data are presented in a structured format, reducing the need for interpretation. Buildsimple emphasizes precisely this benefit in its communications regarding AWS Qualified Software and Security & Compliance: faster, more reliable decisions for compliance, security, and IT leadership.

Yes. Buildsimple publicly highlights its use in companies regulated by BaFin and features references from regulated industries such as insurance on its website.

For questions regarding security and compliance, interested parties can contact Malte Sukopp . For an initial consultation on using Buildsimple, please contact Martin Jarosch, Sabrina Terbille or sales@buildsimple.de are the appropriate contacts. The Security & Compliance page and the Buildsimple News section provide links to the relevant contact information.