Security and privacy
This is the place where we explain how we handle security and data. Anything not covered here is in the privacy statement.
Collect as little as possible
We don't ask which AI systems you use in order to create a profile of you. We keep the answers to the quick-scan only to be able to send you the result, and you can have them deleted.
Technology
Everything goes over https with HSTS. Passwords are stored hashed, sessions are in the database, and two-step verification is available via email or sms — available to everyone, and never mandatory.
An encrypted backup is made daily, and that backup is automatically restored in a test — a backup you've never restored is not a backup.
Download everything, always
Via your settings you export all your data as a ZIP file with one click. You can cancel at any time; your invoices remain available as long as the law requires.