Security and data
Where your data is, who can see it and how it is protected. Short, with no small print.
Where the data is
Server in Germany (EU)
The app, the database and the files are on a netcup server in Germany. All traffic is encrypted (HTTPS).
Each company sees only its own
Every database query keeps each company's data apart. The platform administrator sees only totals (for example the number of vehicles), not your contracts, drivers or debts.
Backups every night
The database and the files are copied every night, also to a second location in the EU. The copy is encrypted on the server before it leaves, so without our key it is unreadable even to someone who reaches the storage. Copies are kept for 30 days, and restoring from them is tested.
Protection in the browser
The browser may only run code from our own address. If someone managed to slip in foreign code, it could not run or send your data to another address.
Server monitoring
The server is checked every 10 minutes (the app, the disk, the nightly backup). If something is wrong, an alert goes out right away.
Sign-in and accounts
Passwords
A password has at least 8 characters and is stored only as a hash: nobody can read it, not even us. After 5 wrong attempts the account is locked for 5 minutes.
Email when a new device signs in
When someone signs in to your account from a phone or computer that has not been used before, you get an email with the time, the device and the place.
Two-step sign-in
Optional: besides the password, signing in asks for a six-digit code from an app on your phone (Google or Microsoft Authenticator). A stolen password alone is not enough.
Fingerprint on the phone
The app on your phone can ask for your fingerprint, face or PIN every time it opens. The fingerprint stays on the phone.
Who sees and changes what
Roles and permissions
The owner gives each user a role: the accountant only views and records payments, the mechanic does not see prices or debts, and only the owner and the manager see profitability.
Change history
For every contract, payment, vehicle and driver you can see who changed what and when, with the old and the new value.
Who signed in and from where
The owner sees every sign-in of the company's users: time, device and approximate place.
Deleting
A deleted record disappears from the app at once, and from the backups within 30 days.
AI and your data
Some Pro features (filling forms by voice, reading photos of fines and documents) use Claude, an AI model by Anthropic. Only what you started is sent, and only for that request.
Anthropic does not use this data to train models and deletes it within 30 days. Details are in the Privacy policy.
The data is yours
You export lists, ledgers and reports to Excel whenever you want. If you stop using ServisOS, the owner has 30 days to export the data, and then we delete it.
We do not sell data or use it for advertising. The website has no analytics or tracking cookies. Payment cards never pass through ServisOS.
Frequently asked questions
Can someone at ServisOS see my contracts and drivers?
In the app the platform administrator sees only totals per company. Only the service provider has access to the server, for maintenance and backups, under the Data processing agreement.
What if I lose my phone?
Sign in on a computer and change your password. If you turned on two-step sign-in, use one of the recovery codes you saved. Turn the fingerprint lock on again on the new phone.
What if the server is down?
The app waits for the server to come back and you continue without signing in again. The data is in the database and in the nightly copy at a second location.
How do I report suspected misuse?
Write to [email protected] or use "Something not working?" in the app. We answer as soon as we can.
Everything about data processing: Privacy policy and Data processing agreement.