SECURITY & GDPR
Your customer data is the most valuable thing you have.
That's why we don't add security afterwards — we lay it down first, before a single customer is in the system. Below is exactly what we do, in plain language.
01 — YOUR OWN ENVIRONMENT
Nothing shared. Not with our other work, not with other clients.
Every client gets their own application and their own database, hosted in Europe. A bug or outage at another client has nothing to do with your environment.
YOUR BUSINESS
- Application
- Database
- Backups
CLIENT B
- Application
- Database
- Backups
CLIENT C
- Application
- Database
- Backups
02 — WHAT WE DO
Six layers, on every project.
- A
Permissions in the database
Who can see what is set in the database itself. Hiding a button isn't enough — we test every role by logging in as the wrong person.
- B
Test and live strictly separated
New features are built and tested with dummy data. Real customer data never goes into the test environment.
- C
Audit trail
Every change records who changed what, and when. Handy when questions come up, essential in a dispute.
- D
Deletions can be undone
Deleted a customer or order by accident? It isn't really gone and can be restored.
- E
Daily backups, practised recovery
A backup that has never been restored is just a rumour. We practise the recovery.
- F
Encrypted
Data is encrypted in transit and at rest.
03 — YOUR RIGHTS UNDER THE GDPR
- Data processing agreement
- Standard with every project.
- Export
- All your data, whenever you want.
- Access and deletion
- You can carry out requests from your customers.
- Sub-processors
- A public list of every service we use.
WHAT WE DON'T PROMISE
No system is 100% secure. Anyone who promises that either doesn't know or isn't telling you.
That's why we work with multiple layers, so a single mistake is never enough, and we practise what happens if something does go wrong. There's also no such thing as a "GDPR certificate" — but there is a way of working you can check. Ask us about it.
04 — FREQUENTLY ASKED QUESTIONS
- Where is my data stored?
- In your own environment, with a hosting provider in Europe.
- Who can access it?
- Your employees, each according to their role. Us only when it's needed for maintenance or support.
- What if I want to stop?
- You take all your data with you, in a common format. No lock-in.
- Do you use my data for anything else?
- No. Your data is only used to make your system work.
Questions about security? Ask them before you sign anything.
Book a call