Security and data access
We restrict functions, never your data. That applies when a payment is late and after cancellation.
Own instance per customer
Each customer gets their own instance with its own database. Within an account, companies are separated on the server; other companies’ records cannot be retrieved.
Sign-in
Sign in with a passkey or two-factor authentication. Fiscanto asks again before payment approvals, bank access, API keys and role changes.
Documents that cannot be changed
Issued invoices are locked, down to the database. Corrections are made with linked credit notes. PDFs and uploaded originals are stored with a checksum.
Event log
Issuing, credit notes, payments, reminders, sending and permission changes are recorded in a hash-chained log that cannot be altered.
AI makes suggestions only
AI agents do not pay, do not issue documents and do not change master data. Text from receipts and emails is treated as untrusted input.
No cookies on this website
This website sets no cookies, loads nothing from third-party servers and uses no tracking. Fonts and images are served from our own server.
Your data stays accessible
If a payment is late, your data stays readable and exportable. After cancellation you export everything in full and, if you wish, keep read access with archive access.
- If a payment is late, your data stays readable and exportable.
- After cancellation you can export everything in full for 90 days at no cost.
- With archive access you keep read access after that.
- Two-factor sign-in and passkeys, data processing agreement in your account.
- All service providers involved are named in the list of sub-processors.
Agreements and documentation
The data processing agreement, the list of sub-processors and the technical and organisational measures will be published under Legal once they have been reviewed by our solicitors.