Security

• In the inventory, names, details and attached files are encrypted with AES-256-GCM.
• The application servers and the backups are located in the European Union.
• Communications are encrypted in transit.
• The list of our sub-processors is published on the corresponding page.

What is stored encrypted and who can access it

The titles and details you write for each item, and the files you attach, are stored encrypted (AES-256-GCM), as are your recipients' names and contact details, and any notes you write about them. The rest is stored unencrypted: for example, the type of connection with each recipient and, for any debts you note, their category, status and estimated amount.

The encryption key is on our server, because it is needed to show you your information and to transmit it when the time comes. This means that Sucesio is technically able to access what is encrypted as well. What prevents this is not technology: it is our internal rule, which authorises that access only to provide the service to you, to carry out the transmission, to answer people exercising their rights, and to comply with a legal obligation or a court order.

What we do not have yet. Today there is no automatic log of accesses to your information: compliance with the rule rests on our word. We also have no external certification and no penetration test carried out by an outside party. We say so because you should know.