Security
Your data, separated and encrypted
We handle tax data and data about your rentals. That is why security is built into the foundations of the product, not added at the end.
How we protect your account
One database per account
Each customer's data lives in its own database. The account always comes from your verified sign-in, never from the page address.
Encryption with a key of its own
Certificates, tax IDs and IBANs are encrypted with a key specific to each account, itself protected by a master key.
No passwords by email
Sign in with a passkey (Face ID, Touch ID, Windows Hello) or with a password and a TOTP code. By email we only send one-time codes that expire after 15 minutes.
Step-up confirmation
Sensitive actions, such as uploading a certificate, cancelling an invoice or exporting the account, ask you to verify your identity again.
Roles
Owner, administrator, member and accountant with read-only access. Every important action is recorded in the event log.
Unalterable records
Invoicing records are append-only: they cannot be changed or deleted. Corrections are made with corrective invoices or cancellations.
Your data is yours
- Full account export as a ZIP file: invoice PDFs, records with their hash chain, and tables as CSV.
- When importing bookings we discard guest names and contact details.
- No analytics or advertising cookies: only the technical ones needed for signing in and for security.