Security & GDPR
You trust us with your clients’ data. We take that seriously.
An accounting firm is responsible for the sensitive data of hundreds of companies and people. So you will not find marketing slogans here, but concrete answers: where the data is, who can access it, and what happens when something breaks.
Data stored in the European Union
All data is stored exclusively on servers in the European Union — the application, documents, and backups. Transfers are encrypted (HTTPS/TLS), backups too.
Backups with verified restores
We back up every night — and regularly verify that restoring from the backups actually works. A backup nobody ever restored is not a backup.
Two-factor authentication
Logins are protected by a second factor (TOTP) with trusted devices and backup codes. The owner can require the second factor for the whole firm.
Roles, permissions, and a security log
Everyone sees only what belongs to them: an accountant their clients, a client only themselves, the owner the whole firm. And the security log shows who signed in and when, who downloaded what, and every refused attempt to reach the firm’s data — including any access by Evidenta’s support.
GDPR and a data processing agreement
Personal data processing has clear rules, including the right to erasure. A data processing agreement (DPA) is part of the terms for every firm.
Over 14,000 automated tests
Every change to the app passes thousands of tests before it reaches you. Reliability is not a promise, it is a process.
Have a question you do not see here? Ask directly — we answer security questions concretely, not with phrases. Write to us.