Security & Privacy
Your financial data deserves the highest protection. We treat every euro of business value with the care it deserves.
Our security standards
Built for trust
Bank-level encryption
All data is encrypted with AES-256 at rest and TLS 1.3 in transit. The same standard banks use.
Read-only integrations
Our accounting integrations can only read, never write. Your source data remains unchanged.
EU-based hosting
Primary hosting in the EU. Where sub-processors outside the EEA are necessary, we use appropriate safeguards as described in our privacy policy (including SCCs).
Complete audit trail
Every action is logged with timestamp and user. Exportable for compliance.
Role-based access
Granular permissions: advisors see only their clients, owners only their businesses.
GDPR-compliant
Fully compliant with GDPR. Right to access, correction, and deletion guaranteed.
Data handling
How we handle your data
Transparency is fundamental. This is exactly what happens with your data.
- Financial data is only used for estimate calculations
- No sale or sharing of customer data with third parties
- 90-day export window after account termination
- Default retention up to 24 months for account and dossier data (unless longer legal retention applies)
- Encrypted backups with rolling 90-day retention
- Technical logs retained for a maximum of 12 months
- Incident response with notification without undue delay
Certifications
Independently verified
GDPR / AVG
European privacy legislation
SOC 2 Type II
In progress
ISO 27001
In progress