Security
Your numbers stay yours.
Read-only bank access, encrypted credentials and receipts, hosting in the EU – and every filing only happens after your explicit approval. Nothing is filed until you explicitly approve it.
How we protect your data
Security in six points.
Read-only bank access
Via finAPI. Operate cannot move money.
Encrypted
Credentials and tokens are stored encrypted (AES-256-GCM).
Hosting in the EU
The app runs on DigitalOcean in Frankfurt, the database in Frankfurt, receipts and uploaded documents in Stockholm – all within the EU.
Secure sign-in
Sign in with Google or with email and password. You can additionally turn on two-factor sign-in (TOTP).
Approval before filing
Every filing only after your explicit approval.
Audit log
Important actions are logged.
Your rights
GDPR and BAO – both taken seriously.
You can export your data at any time and ask for erasure. At the same time, the BAO retention obligations apply.
Data export at any time
You can export your bookings and receipts at any time.
Access and erasure
You can ask for access and erasure under the GDPR at any time.
Data processing agreement
You can find the data processing agreement online.
DPA
Found a gap?
Report it to us.
Responsible disclosure
Write to security@operate.guru.
You work. Operate does the rest.
Start for free – no credit card.
Nothing is filed until you explicitly approve it.