Security and privacy
How srfce separates, protects and locates your data.
Where the data lives
The database runs in the Frankfurt am Main region (eu-central-1), the application on IONOS servers in Germany. The vendor is TPWD AG, Berlin.
Separated workspaces
Row level security separates the workspaces inside the database; every query and every server function checks membership on top of that.
Roles
Roles from administration to accounting, plus a customer view of its own. What each may do is shown in an overview derived from the application itself.
Encrypted credentials
AI keys as well as IMAP and SMTP passwords are stored encrypted and never handed back to the browser.
Pseudonymisation before AI
Personal details are replaced by placeholders before anything reaches the language model, and restored on the server afterwards.
Sign-in
Passwords need 12 to 128 characters with upper and lower case, a digit and a special character. Each workspace decides who may register.
Audit trail
Role changes, absences, AI usage and activity are recorded.