Your data at the centre of the protection
Every request is checked before it reaches the data. What looks wrong is stopped, and what matters is recorded.
What happens to the data after “Send”
Scroll down and follow the request through every check.
- 01 · Connection
It travels over a secure connection
The request leaves the browser encrypted and stays protected all the way to the system, so it can’t be read or altered from outside.
- 02 · Organisation
It reaches only your organisation
It is filed with your organisation, apart from everyone else’s.
- 03 · Team
Only your team sees it
Only authorised staff reach the request, after a secure sign-in to the admin panel.
- 04 · Protection
Attempts from outside stop at the door
Every request passes three layers — network, filter and access. Floods of requests, direct attempts and wrong passwords stop before they reach the data.
- 05 · Log
Every action leaves a trace
Who opened, approved or changed the request, and who tried without the right to, is recorded and can be checked.
- 06 · EU
It is kept in the European Union
The application, the data and the backups are in the European Union.
- 07 · Erasure
It is erased when no longer needed
24 months after the booked slot the personal data is erased automatically. Only an anonymous record remains for statistics.
How we protect the data
Accounts
- Protected staff sign-in
- Sign-in paused after many wrong attempts
- Sessions that expire on their own
Data
- Separated for each organisation
- Stored in the European Union
- Erased on schedule
Network
- Encrypted connections everywhere
- Excessive requests slowed down
- Requests from unknown websites refused
Traceability
- A log of actions in the panel
- Who did what, and when
- Checks when needed or at an audit
Maintenance
- Regular updates
- Changes checked before release
- Encrypted backups every day
Documents
- A data processing agreement
- A description of the measures for public bodies
- Support for audits
For municipalities and public bodies
The system is built with the Bulgarian regulation on minimum network and information security requirements in mind, and in several respects goes beyond it — with mandatory two-factor sign-in, separate data for every organisation and encrypted daily backups. Under contract we provide a description of the measures, a data processing agreement and support for audits.
Responsible disclosure
We keep improving the protection of the system. If you notice anything security-related, write to us at [email protected] — we reply quickly and keep you informed. We appreciate details being shared with us first.
Questions about security?
We’ll go through them in a meeting with your team or your security officer.