Security and data
The software holds identity documents, contracts and financial records of people who did not choose domusdesk: the clients of the agencies that use it. This page says what we do to protect them, where the data lives and what we do not claim.
How we protect the data
One organisation never sees another
The separation is enforced by the database with row-level rules on every table, not by a filter the code has to remember to write. The organisation comes from the session, never from what the browser sends.
Who can do what
Agent, manager and owner roles, checked by the server on every action. Whoever runs an agency or a practice must pass a second factor, with an authenticator app or a passkey. Exporting documents and photos is reserved to the owner. Access to documents and personal data is logged.
Documents and sensitive data
Identity-document data and anti-money-laundering evidence are encrypted at rest and kept out of logs, error reports and exports. Files are downloaded only through signed links that expire; uploads are checked for their real file type. Passwords are stored with scrypt.
Copies and recovery
The database has its provider's point-in-time restore. Documents sit in a versioned store protected against deletion and, every hour, are copied to a second provider under separate credentials. Restore is rehearsed periodically, not just planned.
Data in Europe
The database, the application's functions and the documents are hosted in data centres in the European Union. The providers that process data on our behalf are listed in a public register, and every change is announced to account owners before it takes effect.
Your data stays yours
A complete export of data, documents and photos whenever you want, even on the free plan. If a subscription ends and the organisation has more properties than the free ones, the data stays for 30 days in exit-only mode and is then deleted after the export; anti-money-laundering records the law requires to be kept stay for the legal term.
Where the data lives
By function, according to the sub-processor register in force.
The detail by provider, with purpose, data seen and transfer mechanism, is in the public register of sub-processors
- Application
- Functions in Frankfurt. Builds and request logs, with IP addresses, in the United States.
- Database
- Frankfurt. All of the organisation's data, with the identifying parts of anti-money-laundering files encrypted.
- Documents and photos
- European Union (Paris and Amsterdam).
- Copy of the documents
- At a second provider, in the Amsterdam data centre, under credentials separate from the main store's.
- Application email
- Sent from Ireland. Recipients' addresses and message text pass through the email provider.
What we do not say
A security page should be checkable. These are the edges of what we claim.
No third-party certification
Today we hold no certification such as ISO 27001 or SOC 2 and we do not cite one. We describe what the software does, and you can read it in the data processing agreement.
Compliance stays yours
domusdesk collects the evidence and flags anomalies. Assessing risk and reporting a suspicious transaction are the agency's legal duties: the software never declares an anti-money-laundering check passed.
AI only if you switch it on
The AI tools are off until the owner turns them on. They never receive anti-money-laundering files or identity documents.
Found a vulnerability?
Write to us in Italian or English, without opening a public issue. We acknowledge receipt within 2 working days, assess the report within 7 and fix a confirmed serious problem within 30 days, sooner where data is exposed. We take no legal action against research done in good faith within the rules.
The rules for researchers
Do not test against production or another organisation's data: if you think one organisation can read another's, prove it with two organisations of your own on your own installation. No denial of service and no social engineering of agency staff. Do not keep or share data that is not yours.
Documents
Try it with your own data
Free for up to three properties, with no time limit, and the complete export is always available.