Configure data safely

with CAS Merlin CPQ in the Cloud

We all live in a world of accelerated digitalization. Customer behavior and needs can change in a flash. It does not matter where you work or what you do - quick access to relevant and current data is crucial.

Cloud solutions are the ideal companion for your digital everyday working life. Especially in the area of complex configurations, the digital sovereignty of your company and data security are relevant to prevent abuse.

CAS Merlin CPQ complies with the EU-GDPR and is a trustworthy software solution, which has been awarded the Software hosted in Germany and Certified data protection quality seals.

Discover more on the data protection topic in CAS Merlin CPQ in our FAQs and learn more about securely configuring data.

Which data protection regulations apply to the data?

When processing your data, we comply with the EU-GDPR and the German Federal Data Protection Act. What's more, all other relevant legal regulations are also taken into account. 

Where is the Merlin Cloud hosted?

The Merlin Cloud is a fair and digitally sovereign Cloud platform. According to "Software Made in Germany" and "Software Hosted in Germany", the protection of your data in compliance with the EU-GDPR is a matter of course for us. That is why we work with data centers located in Germany that host in compliance with German law. 

Our data centers are certified according to ISO 27001 and have TÜV IT level 3, extended EN50600 class 3. All data are hosted in an independent high-security data center in Germany which has been certified according to ISO 27001. 

Furthermore, all elementary components are created in redundancy to prevent data loss. Secure communications between third-party systems and the data center is guaranteed as all transferred data are encrypted using TLS encryption. Moreover, the physical storage location of the data is exclusively within the EU.

How are personal data processed?

We process and save personal data if necessary to fulfill our contractual and legal obligations. After three years have passed since the end of the respective contract between you and CAS Merlin, we check whether we still need your data and if statutory storage obligations prevent us from deleting it. If the data are no longer required to fulfill contractual or legal obligations, we delete them regularly. 

You can revoke your permission to process your personal data anytime, according to article 7(3) of the EU-GDPR. Customers can control the saving and deletion of their personal data with the CPQ solution. For the purpose of user management, you can access personal data from an existing Active Directory. 

Which data are processed in Merlin CPQ?

In the different Merlin CPQ modules, you save and process different data, for example, user data or customer data from quotes, depending on the use case. You, as the customer, can control these data yourself. 

To whom are the data transferred?

At CAS Software AG, all persons who need access to fulfill company duties are granted access. If required to implement the contract, your data will also be transferred to credit agencies, other service providers, lawyers, collection agencies, judicial officers, and courts where appropriate. 

What do you need to consider when saving personal data in CPQ?

According to the new EU-GDPR, any company that commissions the processing of personal data by a service provider needs to enter into a job processing contract.

Who is responsible for processing the data?

CAS Software AG, CAS-Weg 1-5, 76131 Karlsruhe is responsible for the processing of the data. You can contact our data protection officer Thomas Heimhalt of DATENSCHUTZ perfect GbR at

Security check - good to know

  • All-round protection from data misuse and unauthorized access
  • Of course, the data transfer is encrypted
  • Personal and product-related data remains in Germany
  • High data transparency - you know all about your data anytime
  • Hosting and server location in Germany

Data security

Do you want to learn more about data protection in the cloud solution? 

Stay informed via our CPQ News that include 

Relevant industry information

Exciting specialist articles 

Exclusive event invitations 

... and are conveniently sent to your inbox

Suscribe to CPQ News