Invitation only
Nobody can sign up on their own. An administrator invites every user.
Trust center
Who runs openProd, how we process personal data and who to contact. Roles, the audit log and version history inside the app are on the Security page.
openProd at a glance
Company and privacy facts
Company
openProd is built and run by Lemonmind sp. z o.o., a company registered in Poland. We apply European data protection standards to every user, wherever they are.
Privacy
The Privacy Policy explains what we collect, why we collect it and how long we keep it.
Contact and account details, usage data from the platform and technical data such as IP address and browser. Every purpose has a legal basis under Article 6 GDPR.
Access, correction, erasure, restriction, portability and objection. Write to hello@openprod.io and we reply within 30 days. You can also complain to the Polish supervisory authority, UODO.
Account data for the life of the account and up to 12 months after deletion. Usage and technical data for up to 26 months.
We keep records of processing activities under Article 30 GDPR and have an internal data protection point of contact.
Data processing
Vendors with access to personal data work under data processing agreements, with Standard Contractual Clauses where data leaves the European Economic Area.
Your openProd workspace runs in a private cloud: the hosting provider and region are agreed with you for each installation. Processors and hosting details for your setup: ask us at hello@openprod.io.
Access to your workspace
How people sign in to openProd. What each person may change is set by roles, described on the Security page.
Nobody can sign up on their own. An administrator invites every user.
Passwords have at least 12 characters and are stored as salted scrypt hashes, never as plain text.
Sign-in, password reset and password change are limited to five attempts a minute.
A password reset link works for 30 minutes, and a reset signs out every open session.
Write to hello@openprod.io. Use the same address to report a vulnerability.