Security and privacy
This is the place where we explain how we handle security and data. What is not stated here can be found in the privacy statement.
Collect as little as possible
We do not ask which AI systems you use in order to build a profile from that. We only keep the answers to the quick scan to be able to send you the result, and you can have them deleted.
Technology
Everything goes over https with HSTS. Passwords are stored hashed, sessions are in the database, and two-factor verification is available via email or SMS — available to everyone, and never mandatory.
An encrypted backup is made daily, and that backup is automatically restored in a test — a backup you have never restored is not a backup.
Download everything, always
Via your settings you export all your data as a ZIP file with one click. You can cancel at any time; your invoices remain available as long as the law requires.