Servers in Germany
The application and your data are hosted by Hetzner, in Germany, in the European Union.
Your data, in good hands.
Your workshop’s data is your customers’ data: we handle it with the same care you give their vehicles. Here, in practice, is how it is protected.
HOSTING
In the European Union, backed up every night.
Daily backups
A backup of the database is made every night and kept for 7 days.
Availability monitored
The website’s availability is monitored continuously and published on a service status page.
ACCESS
Every account protected, every action logged.
Encrypted connections
Everything goes over HTTPS, on your subdomain as on your own domain, with a certificate installed and renewed automatically.
Hashed passwords
Passwords are hashed with Argon2id: nobody, not even our team, can read them. Repeated attempts are slowed down.
Two-factor authentication
A code from an authenticator app at each sign-in, with recovery codes. You can require it for your whole team.
Roles and permissions
Administrator, manager, employee, accountant or read only: everyone only accesses what they need, checked on the server.
Activity log
The important actions in your space are logged: who did what, and when.
Sessions under control
Sign out all your devices in one click from My account; changing your password closes the old sessions.
YOUR DATA
Separated, minimised, yours.
Separation by company
Each company’s data is kept apart: a user only sees the spaces they were invited to.
Pending emails encrypted
The content of emails waiting to be sent is encrypted in the database.
Cleaned photos
Inspection photos are resized and stripped of their metadata (GPS position, device) before being stored.
Payments with Stripe
Subscription, deposits and invoices are paid on Stripe: card numbers never pass through BrakorDetail.
Exports and archive
Exports for your accountant (including the FEC file) and a full archive of your data, to download whenever you want.
End of subscription
After a subscription stops, the data is kept for 12 months, in case you come back, then deleted after a reminder email.
GDPR
Clear roles, tools for your customers.
Processor of your data
For your customers’ data, you are the controller and BrakorDetail is your processor, under the framework set out in the terms of sale.
Declared sub-processors
Hetzner (hosting), Brevo (sending emails) and Stripe (online payments, when you turn them on): the list is in the terms of sale.
Your customers’ rights
From a customer’s record: export of their data (access, portability) or anonymisation (erasure). Issued invoices are kept for ten years, as required by law.
Electronic invoices
Your issued invoices and credit notes can be downloaded in Factur-X format; their content is frozen when they are issued.
A question about security?
Found a vulnerability, or your customer is asking where their data is? Write to us: we answer every message.