Security and privacy
This is the place where we explain how we handle security and data. What is not stated here is covered in the privacy statement.
Store as little as possible
The questions you paste into the NIS2 check are not retained if you are not logged in: they are evaluated and discarded. Nothing you enter is stored.
The documents you upload for your dossier — notes, receipts, printouts — are yours. We use them to populate your dossier and for nothing else: not for research, not for benchmarks, and we do not sell or share them with anyone.
Technology
Everything runs over https with HSTS. Passwords are stored hashed, sessions are in the database, and two-factor authentication is available via email or SMS — available to everyone, and never mandatory.
An encrypted back-up is made daily, and that back-up is automatically restored in a test — a back-up you have never restored is no back-up.
Download everything, always
Via your settings you export all your data as a ZIP file with one click. You can cancel at any time; your invoices remain available as long as the law requires.