Security and data sovereignty

Controlled hosting

We favour hosting providers established in the European Union and subject to European law. The final choice is yours and is documented in detail.

Security by design

• Encryption of data in transit (TLS) and of passwords (argon2).
• Principle of least privilege for access rights and technical accounts.
• Limited dependencies, monitored updates and logging of sensitive actions.

Reversibility

Source code, data schemas and operating procedures are handed over to you. Your data can be exported in open formats at any time.

Reporting a vulnerability

If you believe you have identified a security flaw, write to us at contact@smartpilote.com. We acknowledge receipt within 72 hours.