Your quotes, customer data and photos belong to you. Here is how we protect them – technically verifiable, no fine print.
Each company works in its own database. Data from different businesses never sits in the same table, and a login is only ever valid for its own company.
The application runs on servers in the European Union. Every connection is encrypted with HTTPS, and browsers are pinned to the secure connection with HSTS.
Every user can protect their sign-in with a code from an authenticator app; administrators can make it mandatory for the whole company. After several failed attempts, sign-in is temporarily locked.
A request filter blocks known attack patterns (SQL and script injection, path manipulation, scanners). Requests per IP address are limited, and repeat attackers are blocked automatically.
Every night all databases are backed up, encrypted with AES-256 and then checked for completeness. Photos and files are backed up weekly. Retention: 30 days.
Important actions (sign-ins, changes, exports, signatures) are logged. Booked invoices can no longer be changed. Digital signatures store the time and a checksum of the signed content.
You can export all your data at any time (JSON, CSV and files) – even after your subscription ends. There is a DATEV export for your tax advisor.
AI features use the providers’ paid business interfaces. According to the providers’ terms, inputs are not used to train models. The AI does not invent prices: suggestions come from your own earlier quotes.