Security and privacy
This is the place where we explain how we handle security and data. What is not stated here is covered in the privacy statement.
Minimal data retention
Origin data and supplier relationships are commercially sensitive: whoever knows which cooperative you buy from knows your sourcing. Your dossier is isolated per company, and a supplier you invite sees only their own submission — never the chain around it. We retain the answers to the role check only to show you the result, and you can have them deleted.
Technical measures
Everything is transmitted over https with HSTS. Passwords are stored hashed, sessions are in the database, and two-step verification is available via email or SMS — available to everyone, and never mandatory.
An encrypted backup is made daily, and that backup is automatically restored in a test — a backup you have never restored is not a backup.
Download everything, always
Via your settings you export all your data as a ZIP file with one click. You can cancel at any time; your invoices remain available for as long as the law requires.