Trust & security

How we protect your data — our security posture, the subprocessors we rely on, where data is hosted, and how to report a vulnerability. Operated by Zenith Yield GmbH.

Security posture

Authentication & access

Multi-factor authentication (TOTP) with recovery codes, passkeys (WebAuthn), and per-organisation single sign-on (OIDC) with SCIM user provisioning and deprovisioning.

Encryption in transit

All traffic is encrypted in transit with TLS, terminated at the edge and reinforced by in-app security response headers (HSTS, CSP and more).

Encryption at rest

Database backups are encrypted with AES-256 (GPG), and documents and exports in object storage are encrypted at rest (server-side, AES-256). The database and cache volumes rely on the host provider's disk encryption where enabled in your deployment.

Multi-tenant isolation

Each organisation's data is isolated: every query is organisation-scoped and enforced at the database layer with Postgres row-level security.

Secure development & scanning

Every change passes automated security gates in CI: static analysis (Semgrep SAST), secret scanning, container vulnerability scanning, and continuous dependency updates.

Audit log & data rights

Security-relevant actions are recorded in an append-only audit log. You can export your data and request its erasure in line with the GDPR.

Subprocessors

The third-party services we rely on to operate the platform: the personal-data categories each may process, where it is hosted, and the transfer basis when data leaves the EEA. A data-processing agreement (DPA) is signed with each subprocessor that requires one before production use.

Subprocessor	Purpose	Data categories	Hosting	Transfer	DPA
SubprocessorResend	PurposeTransactional + marketing email delivery (prod transport)	Data categoriesAccount identityContact details	HostingUS	TransferDPF / SCC	DPARequired
SubprocessorStripe	PurposeBilling, subscriptions, checkout/portal	Data categoriesBillingContact details	HostingUS (EU region available)	TransferDPF / SCC	DPARequired
SubprocessorSentry	PurposeError monitoring + performance traces	Data categoriesError diagnosticsNetwork metadataAccount identity	HostingUS (EU region available)	TransferDPF / SCC	DPARequired
SubprocessorPostHog	PurposeProduct analytics	Data categoriesUsage analyticsNetwork metadata	HostingEU / EEA	TransferNone (EEA)	DPARequired
SubprocessorObject storage (S3-compatible)	PurposeStores uploaded documents, generated PDFs, and GDPR data exports	Data categoriesDocuments & filesSupport content	HostingOperator-chosen	TransferOperator to determine	DPARequired
SubprocessorPreview CDN (signed private edge)	PurposeSpeeds up document previews via an edge cache	Data categoriesDocuments & files	HostingOperator-chosen	TransferOperator to determine	DPARequired
SubprocessorGoogle Maps	PurposeMap and location visualisation	Data categoriesNetwork metadata	HostingUS	TransferDPF / SCC	DPARequired
SubprocessorMapbox	PurposeMap / geo visualisation (alternative tiles)	Data categoriesNetwork metadata	HostingUS	TransferDPF / SCC	DPARequired
SubprocessorCal.com	PurposeBook-an-expert scheduling	Data categoriesContact details	HostingOperator-chosen	TransferDPF / SCC	DPARequired
SubprocessorGitHub	PurposeSupport-request tracking	Data categoriesSupport content	HostingUS	TransferDPF / SCC	DPARequired
SubprocessorCloudflare	PurposeEdge proxy, DNS, tunnel, WAF	Data categoriesNetwork metadata	HostingGlobal (CDN)	TransferDPF / SCC	DPARequired
SubprocessorInfisical	PurposeSecrets management	Data categoriesNo personal data	HostingEU / EEA	TransferNone (EEA)	DPARequired
SubprocessorHosting provider	PurposeApplication hosting and primary data storage	Data categoriesAccount identityContact detailsDocuments & filesSupport contentBillingNetwork metadata	HostingOperator-chosen	TransferOperator to determine	DPARequired
SubprocessorVercel	PurposeSoftware build cache	Data categoriesNo personal data	HostingUS	TransferN/A (no personal data)	DPA—
SubprocessorTailscale	PurposeSecure private network for staff administrative access	Data categoriesNetwork metadata	HostingUS	TransferDPF / SCC	DPA—
SubprocessorGoogle Cloud	PurposeAI-assisted document reading	Data categoriesDocuments & filesContact details	HostingUS (EU region available)	TransferDPF / SCC	DPARequired
SubprocessorAmazon Web Services	PurposeAI-assisted document reading	Data categoriesDocuments & filesContact details	HostingUS (EU region available)	TransferDPF / SCC	DPARequired
SubprocessorMicrosoft Azure	PurposeAI-assisted document reading	Data categoriesDocuments & filesContact details	HostingUS (EU region available)	TransferDPF / SCC	DPARequired
SubprocessorDATEV	PurposeDelivery of documents to your accounting system	Data categoriesDocuments & filesContact details	HostingEU / EEA	TransferNone (EEA)	DPARequired

Data residency

Our primary datastore runs on deployment infrastructure in the European Economic Area (EEA), in Germany by default. Where a subprocessor offers an EU region we choose it by default — for example product analytics and secrets management. Some subprocessors are US-based, as shown in the table below.

Where a subprocessor is hosted outside the EEA, the transfer relies on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses, and we minimise the personal data shared.

Report a vulnerability

Found a security issue? Please report it privately — do not open a public issue — and give us a reasonable window to remediate before any public disclosure. We aim to acknowledge within two business days. Our full disclosure policy and scope live in the repository's SECURITY.md.

[email protected]Machine-readable policy (security.txt)