Your business data stays protected: role-based access, a full record of every change, and your administration sits on servers in the EU. For payments and optional integrations we work with a small number of parties outside the EU; those transfers run under the European standard contractual clauses. The full list is in our privacy policy. Included on every plan, even on Desk.
Every layer of the platform is designed with security in mind.
Give each user exactly the access they need. Read-only for your bookkeeper, full rights for you, custom for everyone else.
Every invoice has a timeline from sent to paid, and what your accountant does in your books is logged.
Hosted on hardened infrastructure with continuous monitoring, regular backups and encrypted storage at rest and in transit.
Beyond technical security, we have processes in place to protect your data.
Retain records for compliance while keeping export options open for audits and reviews.
Documented response plans ensure timely notification and remediation if issues arise.
Verified recovery flows prevent unauthorized access and keep you working.
Built to meet the compliance needs of any business that works with money.
Data minimization, the right to deletion and transparent processing, aligned with EU privacy regulation.
Every update to invoices and contracts is logged for complete regulatory traceability.
Generate exports for accountants and external auditors with complete data integrity.
We take security seriously. Have questions about how we protect your data? Get in touch, we're happy to explain.