Security and compliance
Controls enforced by the platform, not by policy.
GDPR compliant
EU hosting and data residency
Encrypted in transit
Documents and database encrypted at rest
Controls
- Tenant isolation
- Logical separation between organisations, enforced at the data layer on every request.
- Role-based access control
- Least-privilege roles for traders, operators and administrators.
- Audit logging
- Immutable, append-only record of every state change, retained for the life of the account.
- Two-step sign-in
- A code from an authenticator app on top of the password. Optional for every user, with recovery codes as a fallback.
- Session security
- Short-lived access tokens, httpOnly refresh cookies, and token re-use detection.
- Upload validation
- Content-based file inspection with enforced type and size limits.
- Backup and recovery
- Encrypted backups, kept off the server and restored in practice, not just on paper.
- A second copy of every document
- Every document is copied hourly to a separate location. Deleted or overwritten by mistake? It can be recovered for 30 days.
- Monitored around the clock
- Every backup and copy job is checked automatically, every 30 minutes, and a failure raises an alert.
- Data residency
- Hosting, storage and document processing within the European Union.
- Retention and deletion
- Customer-controlled. A deleted document or shipment leaves the platform at once, and backup copies expire within 30 days.
- Transparent AI
- Every conversation with the assistant is labelled as AI, and nothing binding, like a contract or a sign-off, happens without a person.
Compliance
We act as processor for the shipment data your organisation holds in the platform. Processing terms, the sub-processor list, the transfer basis and the retention period are set out in the Privacy Policy. A data processing agreement is available on request.
Data subject requests (access, correction, export and erasure) are handled through info@ioto.team.