Sendsteps tratta i Suoi dati e cerca di farlo nel modo più sicuro possibile. Crediamo nella trasparenza su come gestiamo sicurezza e privacy dei dati.
Il traffico in transito è crittografato con SHA-256 con RSA. I dati sui nostri server sono crittografati con AWS RDS Crittografia (AES-256). L'infrastruttura è accessibile solo al team di sviluppo e tramite VPN. Tutta l'attività è registrata e sottoposta ad audit.
Sendsteps is hosted on AWS (Amazon Web Services). Currently, our infrastructure is located in the EU (Germany). Data is stored redundantly at multiple locations in our hosting provider’s data centres.
Sendsteps è certificato ISO 27001 (Information Security Management System). Veda il certificato.
Background checks include an dificial statement di good behaviour granted by the Dutch government. Staff take security and data privacy training. Strong passwords that expire, disk encryption, and multi-factor authentication (MFA) wherever possible.
Monitoriamo prestazioni e sicurezza con strumenti di monitoraggio di infrastruttura e applicazioni. La produzione ha un ambiente di logging centralizzato che copre sicurezza, monitoraggio, disponibilità, accesso e altre metriche.
La disponibilità approssimativa dei servizi Sendsteps è del 99,95%, come indicato in Security Standard v2.0. Il disaster recovery è testato ogni anno. Dati e codice sorgente vengono sottoposti a backup automatico periodico.
I Security Standard affiancano questi documenti. Nulla di quanto segue è un riassunto di un documento che non abbiamo pubblicato.
Quali dati personali trattiamo, su quale base giuridica, per quanto tempo, con quali sub-responsabili e come può esercitare i Suoi diritti. Versione 2.1, 4 agosto 2026.
Le condizioni che si applicano ai Free Services e ai Paid Services, compreso il trattamento dei dati (clausola 10). Versione 15, in vigore dal 30 ottobre 2024.
Le categorie di cookie che Sendsteps usa (Essential, Functional, Analytical, Tracking) e la dichiarazione Cookiebot dei cookie in uso.
Sendsteps è certificato ISO 27001. Il certificato copre il nostro Information Security Management System (ISMS).
Veda il certificato ISO 27001 (PDF) →
Trattiamo i dati personali come Controller o Processor ai sensi del Regolamento generale sulla protezione dei dati dell'UE. La privacy è integrata nella piattaforma, non aggiunta dopo. Le domande vanno al nostro Data Protection Officer.
Legga la dichiarazione sulla privacy (EN) →
The full Sendsteps Security Standards. Version 2.0, 3 April 2026. Internal links in this document point to the privacy statement (EN) and terms of service on this site.
Sendsteps handles your data and tries to do that in the most secure way possible. When speaking about data we discern the categories as described in our privacy statement (EN).
As a company Sendsteps firmly believes in transparency both in a business as well as in a security context. We always try to be as open and clear as possible in the way we handle both security and (data) privacy. If you are looking for more information on how we treat your personal information or information about the third-parties we work with please have a look at our privacy statement (EN).
In this document we give you a look into our organization and the way we put our security and privacy policy in practice.
In our Terms and Conditions (EN) we guarantee to keep your account and personal data confidential. However, as also described in our Terms, if you use our "Free" version, all data we gather can be used for promotion purposes, on our website and can be shared with third parties. If you want your data to be handled in a more secure way we highly recommend using our of our paid plans.
Our staff and third parties, anyone of whom needs to work with your data is contractually obligated to keep that confidential.
As a company we place the greatest amount of importance on making sure the highest possible level of security is in place. Our staff plays an important role in this, therefore we have placed strict controls over our staff and all our processes.
When hiring a new staff member we perform background checks during the hiring process. Including an official statement of good behaviour granted by the Dutch government. When hired each staff member is required to take a security and data privacy training with our Security Officer. During said training the focus is on how to work securely using both our own tools as well as the tools we use from third parties, handling sensitive information (including your personal data). Physical security as well as general security best practices are also covered.
Working at Sendsteps means for some employees that they need to have access to systems that store and process sensitive data. For example, if something went wrong with your payment we may need to access your personal data in order to diagnose the problem. Sendsteps and her employees are committed to making sure that sensitive data is never seen by anyone who doesn't need access to it. We use restrictions on the application layer to make sure that each member of staff only has access to the data that is needed to perform their jobs. These employees are prohibited from using these permissions to view sensitive our personal data unless it is necessary to do so.
Sendsteps performs regular internal audits to make sure we adhere to our own high security standards. Additional checks are made when an employee leaves the company. Also we force every employee to use strong passwords that expire and disk encryption. Multi-factor authentication (MFA) is used wherever possible.
When using Sendsteps, it is possible to export your data through our dashboards.
Su richiesta of our customers it is possible to delete the data of a specific event. We will process this request when it comes it, usually within 24 hours. Our customer support will happily provide you any sort of assistance necessary.
Sendsteps is hosted on AWS (Amazon Web Services) infrastructure. Currently, our infrastructure is located in the EU (Germany).
Amazon Web Services maintains multiple certifications for its data centres, including ISO 27001 compliance, PCI Certification, and SOC reports. For more information about their certification and compliance, please visit the AWS security website and the AWS compliance website.
When it comes to our server architecture we use a tiered model that keeps services and functions as much as possible within the specific tier.
Sendsteps uses the latest available suites and protocols to encrypt (SHA-256 with RSA Encryption) all traffic in transit. Your data on our servers is encrypted (AWS RDS Encryption - AES-256) as well, our infrastructure is accessible only by the development team and through VPN. All activity is logged and audited.
We closely monitor any changes in the cryptographic landscape work promptly to upgrade our products to respond to new cryptographic weaknesses as they are discovered and implement best practices as they evolve. For encryption in transit, we do this while also balancing the need for compatibility for older versions of commonly used browsers.
Approximate availability of Sendsteps services is at 99.95%. Our infrastructure runs on systems that are fault tolerant of failures of individual servers. Sendsteps' quality assurance team tests disaster recovery measures on an annual basis.
Your data is stored redundantly at multiple locations in our hosting provider's data centres to ensure availability. We have well-tested backup and restoration procedures, which allow recovery from a major disaster. Both your data and our source code are automatically backed up on a regular basis.
We closely monitor both performance as well as security of our products and services. We use infrastructure as well as application monitoring tools. In combination with specialized tools for analysis and data visualization, it gives us strong insights about the condition our services are in. Sendsteps has an extensive, centralized logging environment in its production environment which contains information pertaining to security, monitoring, availability, access, and other metrics about our whole range of products.
In development we follow our own implementation of Agile/Scrum methodology. We frequently release new versions of our products and continuously change our workflow based on evolving needs and the lessons drawn from the past.
All our software is tested extensively by our quality assurance team. These checks are performed both manually as well as automated. Newly created code is peer reviewed and only put live it meets a set of pre-defined requirements.
New code is deployed to our staging environment first. There a set of automated tests as well as manual test are run to ensure the best quality possible. If everything works as expected, the new feature is put live. In case of emergencies, serious bugs or if anything else goes wrong, we are able to release a fix for the problem within the hour.
In the unlikely event of a security breach, Sendsteps will promptly notify you personally of any unauthorized access to your data. We have incident management policies and procedures in place to handle such an event.
On a regular basis Sendsteps' systems are audited by respected external security firms to ensure that our practices stay on par with current security standards. Su richiesta we can provide you with the most recent report of these audits.
Published documents are linked below. A Service Level Agreement and Data Processing Agreement are available on request via legal@sendsteps.com. External security audit reports are also available on request.
Su richiesta
Su richiesta
Le domande su come trattiamo i dati personali vanno al nostro Data Protection Officer. Le questioni legali, inclusa la richiesta del report di audit di sicurezza esterno più recente, vanno a legal@sendsteps.com.