Online ErhvervSecurity and data
You put your customers’ names, addresses, invoices and photos into the app, and you are responsible for them towards your customers. This is how we look after them. Only what we can stand behind.
- Data in the EUThe database is in Ireland, and the app’s servers run in Dublin.
- Only your companyRules in the database itself keep companies apart.
- EncryptedEncrypted connection. Keys and CPR numbers are stored encrypted.
- Your data, whenever you wantDownload everything as files, even after you have cancelled.
How we look after it
In plain words where possible. Open a topic for the details. The legal side is in the data processing agreement.
Where your data is keptThe database is in the EU · A backup every day · Sub-processors · The AI is not trained on your data
- The database is in the EUWith Supabase in Ireland. The app’s servers run in Dublin.
- A backup every dayA full copy of the database is taken every day. The copies are also kept in the EU.
- Sub-processorsSome providers, for example for AI, SMS, telephony, email and payments, process data outside the EU, mostly in the USA. This happens under the EU’s standard contractual clauses. They are all listed in the data processing agreement, and you are told at least 30 days before we start using a new one.
- The AI is not trained on your dataThe AI providers process data on our behalf and may not use it to train their models.
Encryption and signaturesEncrypted connection · Keys and CPR numbers · Signatures on quotes
- Encrypted connectionAll traffic between the app and the server is encrypted (HTTPS).
- Keys and CPR numbersAccess to your accounting and payroll software and your employees’ CPR numbers are stored encrypted (AES-256).
- Signatures on quotesThe customer signs digitally with a simple electronic signature under the EU’s eIDAS rules. We store a fingerprint of the document, so a later change can be detected. You can require an SMS code before the customer can sign.
Your customers, your responsibilityData processing agreement · AI phone conversations · When a customer wants to be deleted
- Data processing agreementYou accept it in the app. It sets out what we may do, who we use, and that you are told no later than 48 hours after we become aware of a security breach.
- AI phone conversationsTranscripts and summaries of the conversations are deleted automatically after 90 days. We do not store the audio ourselves. It stays with the telephony provider and is only fetched when you play it.
- When a customer wants to be deletedContact us and we will delete the customer’s details across the system. Invoices and anything else that has been booked stay for as long as they must be kept.
Your data, whenever you wantDownload everything · Delete the account
- Download everythingYou can always download all your company’s data: as one zip file with a CSV file per table that opens in Excel, or as JSON. Photos and attachments come as links. It also works if your subscription is paused or cancelled.
- Delete the accountThe owner can delete the company account and all its data under Settings.
Operations and monitoringChecked every quarter of an hour · Errors are collected · Who did what
- Checked every quarter of an hourEvery 15 minutes we automatically check both the public pages and the app itself as a logged-in user. If something goes wrong, we get an SMS.
- Errors are collectedErrors in the app are collected automatically, so we see them and can fix them.
- Who did whatThe app keeps a log of important actions. Changes to hours are kept as history, even when an entry is deleted.
Whether the app is running right now is shown on our status page (in Danish) at onlineerhverv.dk/status. The legal side is in the data processing agreement, the privacy policy and AI transparency (the legal texts are in Danish). Questions? Call 93 94 12 06 or write to hej@onlineerhverv.dk.
Who can see what
Only your company can see your data, and inside the company you decide what each employee may do.
- Only your companyEach company’s data is kept apart by rules in the database itself (Row Level Security), not only in the app. Another company cannot see your customers.
- Roles per employeeYou decide what each employee may do: see material prices, see the job’s contribution margin, approve invoices, handle enquiries and more. An apprentice never sees prices or margins.
- Pay is locked down furtherAn employee cannot read colleagues’ pay or bank details, not even by going around the app and querying the database directly. We have tested this with an employee login.
Questions about security and data
If your question isn’t here, call 93 94 12 06.
Where is my data kept?
The database is with Supabase in Ireland, and the app’s servers run in Dublin. Some sub-processors, for example for AI, SMS and payments, process data in the USA under the EU’s standard contractual clauses. They are all listed in the data processing agreement.
Can other companies see my customers?
No. The companies are kept apart by rules in the database itself, not only in the app.
Can my employees see my finances?
Only if you let them. You choose per employee whether they may see material prices and the job’s contribution margin. An apprentice never sees them, and no employee can see colleagues’ pay.
Does a digital signature hold up?
A simple electronic signature has legal effect under the EU’s eIDAS rules and can be used as evidence. We store a fingerprint of the document with the signature, and you can require an SMS code before the customer can sign.
What happens to my data if I stop?
You can download all your data as files, also after you have cancelled. The owner can delete the company account and all its data under Settings.
What happens if Online Erhverv closes down?
You can always download all your data as files. If you have connected e-conomic, Dinero or Billy, your invoices are already in your own accounts.
Is my data used to train AI?
No. The AI providers process data on our behalf and may not use it to train their models.