Transport and storage
Browser sessions use modern TLS versions for data in transit. Persisted data is held in managed infrastructure with encryption appropriate to the deployment you subscribe to. Specific regions and key management details may appear in an order form or data processing agreement when one is in place.
Access control
Workspace membership determines what a signed-in user can see and change. Route protections enforce company boundaries so identifiers in URLs cannot leak records across tenants when identifiers are guessed.
Operational practices
Changes roll out through controlled pipelines. Incidents are triaged when reported through official channels. Customers with contractual review rights may receive deeper runbooks or SOC reports where applicable.
Long-term invoice archive
When object storage is configured, each signed invoice PDF is copied to an isolated company prefix in IONOS Object Storage with a minimum ten-year retention period. Archived files remain downloadable from the invoice while your workspace is active.