Security was never an afterthought.
We built Actament around your clients’ confidential documents from the very first line of code, instead of adding protection later. Here is exactly how it works.
GDPR compliant
Hosted in the EU
AES-256
In transit and at rest
Your own key
For every stored answer and file
Virus scanning
Every uploaded file
Encryption
All data is encrypted with AES-256 in transit and at rest. On top of that, the answers and documents of every firm are encrypted with their own key, so even a full copy of our database, file storage, or backups contains only encrypted values.
Every encrypted value is bound to the firm and record it belongs to. A value copied anywhere else can’t be decrypted, so the separation between firms holds cryptographically too.
Hosting in the EU
Actament is hosted in Frankfurt, Germany.
Secure access for your clients
Clients open an unguessable link. You choose the level of protection per request: link only, email confirmation, or email and a one-time code, which is the default.
Clients don’t need an account, so there are no client passwords that could leak.
Virus scanning
Every uploaded file is scanned for viruses before your firm can download it.
You stay in control
Your firm’s data is only ever accessible to your firm. You decide per request which of a client’s contacts get access, and every team member works with a role, owner, admin, editor, or viewer, enforced on the server.
An activity log records what happened on each request, and when: created, sent, viewed, reminded, submitted.
What we don’t claim
Actament is not end-to-end encrypted. Our servers decrypt documents to scan them for viruses and to show them to you. We say this plainly, because security claims should be precise.
Legal documents
Everything your firm needs to review us, available without asking.
- Privacy policyWhich personal data we process, why, and for how long.
- Data processing agreementOur AVV under Article 28 GDPR, for the client data you collect with Actament.Coming soon
- SubprocessorsEvery service provider that can come into contact with your data, and its role.Coming soon
- ImprintThe company behind Actament.
Questions from security and IT teams
Where is our data stored?
In the EU, in Frankfurt, Germany. Answers and documents are stored encrypted with a key unique to your firm, on top of AES-256 encryption in transit and at rest.
Is Actament end-to-end encrypted?
No. All data is encrypted in transit and at rest, and answers and documents are also encrypted with your firm’s own key. Our servers can decrypt them, which they need to scan files for viruses and to show them to you.
Who can see our firm’s data?
Only your firm. Within your firm, each person’s role decides what they can do, and your clients only see the requests you share with them.
Can we sign a data processing agreement (AVV)?
Yes. Our data processing agreement under Article 28 GDPR is being finalized and will be published on our security page.
Do my clients need an account or an app?
No. Clients open a secure link. By default they confirm their email address with a one-time code, and there is no password or app to set up.
Questions about security?
We’re happy to walk you or your IT team through how Actament protects your data.
Or write to us at hello@actament.com