Security and data protection

Your company data deserves the same protection as your bookkeeping. This is how we protect it – checkable and without small print.

01 / 04

Location and hosting

Servers in GermanyThe application runs on servers in Germany.

Backups in the EUAn encrypted backup (AES-256) every night in a second data centre in the EU – kept for 30 days.

No processing outside the EUYour data does not leave the EU.

02 / 04

Two-factor sign-inPassword plus a code from an authenticator app. Every code works only once.

Passwords never in plain textOnly a salted hash is stored (PBKDF2-SHA256, 600,000 rounds).

Protection against guessingAfter 5 wrong passwords the account is locked for 15 minutes.

Separate areas and rolesEach company has its own area. Editors change data; reviewers only read.

03 / 04

Encrypted transferHTTPS/TLS only.

Every change loggedWho changed what and when is documented. Nothing is shared without your action.

No tracking cookiesNo tracking, analytics or advertising cookies and no third-party services on this website.

04 / 04

GDPR data processing agreementArt. 28 GDPR, with technical and organisational measures – part of every contract.

Data exportOn request you receive a complete copy of your data (ZIP).

DeletionAfter the contract ends your data is deleted.

Tested updatesAround 500 automated tests before every update; a backup first, so the previous version can be restored.

Questions about security? We answer them in the presentation – or in writing.

getnachweis · Cologne, Germany
ESG you can prove.