End-to-end encryption, data hosted in the EU and strict access controls. Reporter confidentiality is not a promise: it's the architecture.
Processing compliant with the European regulation and the Spanish organic law, DPA included.
Reports and record of processing activities compliant with the Agency's criteria.
Data centers in the European Union, with no international transfers.
Mandatory for all case managers. Without 2FA there is no backoffice access.
Owner, manager and read-only. Each role sees only what it should.
Automatic access block when the case manager is involved in the case.
Each organization's data is logically separated. No leaks between entities.
Every action is sealed with date, time and responsible person, with no way to edit or delete. The proof of your diligence before the authority.
We publish the list of providers involved in the service. All with data in the EU.
| Sub-processor | Purpose | Location |
|---|---|---|
| Cloud infrastructure provider | Hosting and compute | EU · Spain |
| Transactional email service | Notifications to managers | EU · Ireland |
| Payment gateway | Subscription billing | EU |
| Backup service | Encrypted backups | EU · Germany |
We support you through channel rollout and training your Compliance Body. No cost until it is live.