Cybersecurity is one of our top priorities. All our systems are hosted by VegaSystems in Germany, a certified data center (ISO 27001 and ISO 9001) with 24/7 surveillance, redundant power supply, and strict access controls.
Access to critical systems follows a four-eyes principle and requires multi-factor authentication on all admin accounts. We also conduct regular independent penetration tests and vulnerability assessments.
All data and backups are fully encrypted (TLS/SSL) and securely stored daily at a geographically separate location. In the unlikely event of an incident, our incident response plan is activated immediately – including notification of the authorities and transparent communication with our customers.
We’ve been operating for over 20 years and have never experienced a successful cyberattack. Naturally, we are fully compliant with GDPR regulations.