Security & data sovereignty

Your data stays yours.

Who owns it, where it lives, who can reach it and how you take it with you. Plain answers, with the technical detail in our whitepaper.

Our position

Six commitments about your data

Your business records belong to you. We process them only to provide the service you subscribed to.

Every workspace has its own PostgreSQL database. Your records do not sit in tables shared with other customers.

Inside your workspace, roles and permissions decide who sees what, and every change is written to an append-only audit log.

Lists and reports export, documents print to PDF, and customer and supplier statements export for your own records.

Hosting region matters for some regulations. Ask us which region your workspace runs in and we will tell you in writing.

When a subscription ends, your data is returned or deleted as set out in your agreement. Ask us for the specifics before you sign.

Isolation

1
You sign in
A session is created for you and your tenant.
2
Request arrives
The tenant in your session is checked against the one addressed.
3
Permission check
Your role must hold the named permission for the action.
4
Your database
Only your tenant database is queried, filtered by your company.
5
Logged
Changes are recorded in the append-only audit log.

Sovereignty

Data sovereignty means knowing which legal system and which people can reach your data. Here is what to ask, and how we answer today.

Question	Our answer
Is my data in a shared database?	No. One database per workspace.
Can staff of other customers see it?	No. Requests are checked against your tenant and company.
Is there an audit trail?	Yes, append-only.
Can I export my data?	Yes: list and report exports, PDFs and statements.
Which region is it hosted in?	Ask us; we will confirm in writing.
Do you hold third-party certifications?	We do not claim any on this site; ask for our current position.

Keep reading

Send your data-protection or residency questions and we will answer them.