Security & audit log
Every change traceable, every layer secured — so you stay in control and pass every audit.
Audit log
Administration → Audit log records every relevant change tamper-proof: who, when, what — from budget changes and contract decisions to key rotations.
- Filters by entity, action and user; the view shows the latest 200 entries
- CSV export for audit and long-term archiving
- Entries are immutable — even for administrators
Security architecture
| Layer | Measure |
|---|---|
| Tenant isolation | Isolation at the database level — enforced by the database itself, not just by the application |
| Encryption at rest | Encrypted storage of all data; integration credentials and documents additionally with the tenant key (AES-256-GCM, optionally BYOK) |
| Transport encryption | TLS throughout |
| Backups | Daily backups, stored encrypted |
| Hosting | Exclusively in Germany — GDPR-compliant |
| Sign-in protection | Passwords stored only as secure hashes, throttling of sign-in attempts, email verification, invitations with self-set passwords |
| Registration protection | Self-hosted captcha, no tracking service |
Roles & permissions
Access follows the principle of least privilege: roles control functional rights, cost center scoping limits budget owners to their area, and API keys act only within the read or write permissions granted per data type.
Customer responsibilities
- Assign roles sparingly; keep the administrator circle small
- Treat API keys and SCIM tokens like passwords and rotate when needed
- With BYOK: keep your own key safe
- Deactivate leavers promptly — or let SCIM automate it