No certification badge we do not hold. Here are the mechanisms actually in place, the providers your data passes through, and what we cannot yet claim.
Every point below matches code that is written and covered by tests. We will walk you through the detail on request.
Both are done from your settings, with no email to write and no waiting period.
You request an archive of your personal data from your settings. It is built in the background, downloadable from your account, and deleted automatically once its retention runs out.
You retype your organisation’s name to confirm. The account is marked for erasure and purged seven days later — a scheduled task does it every night. You can cancel during those seven days.
The DPA is available on request, and its public version is online. It names the sub-processors below.
The page this one replaces claimed “no customer data leaves the European Union”. That was false, and it is the kind of claim that gets paid for in a contract annex. Here is the real list. The last four are only involved if you connect the matching integration.
Each is covered by the European Commission’s standard contractual clauses. If your industry forbids transfers outside the EU, raise it before you sign: on some of these, a European alternative exists.
Written here rather than in a footnote. A security page is worth what it refuses to promise.
The host is Hostinger International Ltd, in a datacenter located in the United Kingdom, a country covered by a European Commission adequacy decision: that is what our legal notice states, and the legal notice is the binding one. The page this one replaces named a DIFFERENT host — three French cities, a datacenter tier, an HDS certification, DDoS protection and 24/7 monitoring. The site was naming two different hosts one click apart. We keep the name and the region, which are contractual; we do not keep the certifications, which we have not verified ourselves.
Convosia is not certified as an organisation, and we do not display the badge. A host’s certification is the host’s certification.
We have signed no contractual availability figure. The old page’s “99.99% guaranteed” rested on nothing.
The DPA, the sub-processor list, the detail of any mechanism: ask, and we answer with files rather than badges.