Security

Security in brief

This is a short description of the measures that apply to a customer's installation under the contract, not an attestation. The full list of measures is an annex to the data processing agreement.

Separation

Every customer has their own database and their own credentials for it. Customers share the server.

Access

Users have roles, and the server checks their rights on every action. We keep passwords only as a hash.

Transfer

You reach the program only over an encrypted connection. The connection to the mailbox is always encrypted too.

Backups

Every night each database is copied separately, encrypted and stored in a different country from the server. We test a restore at least once a quarter. A restore loses at most one day's work.

Sending

Every first letter is approved by a person on your side, unless you switch on first letters going out by themselves. Follow-ups and discount offers go out by themselves only if you switch that on. The program does not write to your existing customers as if they were new companies. If the program cannot read incoming replies, it holds back outgoing letters. No tracking pixels or redirected links.

Automatic text processing

The texts are only read and used to make suggestions. A person on your side, or a rule set in the program in advance, decides what is sent, which answers go out and how deals move.

Our access

Only we hold the administrator account. We access your data only for the purposes the contract sets, and we do not use it for our own sales or for other customers. Every person given access to your data first commits to confidentiality in writing.

Breach

If there is a breach of your data, we tell you within 48 hours of becoming aware of it.