Security
How we protect your data at ContaTaxPay
ContaTaxPay processes accounting, tax and payroll data. Protecting that data is our top priority. Below is an overview of the main technical and organisational measures.
Access and sign-in
- New accounts are verified by email with a one-time code.
- Passwords are never stored in plain text, only as a hash.
- Role-based permissions (e.g. client, accountant, assistant) limit which data a user can see and change.
Data transfer and storage
- Data between your browser and the platform is encrypted in transit (HTTPS/TLS).
- The application and the database run on servers at Hetzner Online GmbH in Germany.
- Uploaded documents are kept in protected cloud storage (Amazon S3).
- ELSTER certificates are stored encrypted (AES-256-GCM).
Operations and monitoring
- Technical errors are monitored; identifiers and accounting data are masked before they are transmitted.
- Changes to bookings are logged so they can be traced.
- Service providers processing personal data on our behalf are carefully selected and bound by contract.
Your part
- Use a long, unique password and never share your credentials.
- Sign out after use on shared devices.
- Treat emails about ContaTaxPay with care and never give out passwords or one-time codes by phone or email.
Found a vulnerability or suspect misuse?
Please write to us immediately at info@contataxpay.com.
Information on the processing of personal data can be found in our Privacy Policy.