We have implemented an ISMS in accordance with the requirements of ISO 27001 to comprehensively ensure the protection of your data. The scope of our ISMS is defined as follows: "In-house development, provision and operation of software solutions as a service for use by end customers."
All data in our lawcode suite is hosted in Germany in an ISO/IEC 27001-certified data center. There is no data hosting and no data transfer to countries outside the EU.
We have the lawcode suite checked by professional penetration testers at regular intervals. This enables us to guarantee the highest level of additional security for our customers.
The lawcode Suite is regularly positively audited by external companies. An IT security company carries out penetration tests to check the IT security of the lawcode Suite. This ensures that the lawcode Suite and your data are secure.
By using the highest and most modern encryption technologies and audit-proof indexing of data entries and their changes, we also ensure data integrity in the lawcode suite.
The lawcode Suite, our compliance solution, offers you an availability of 99.9% per year. This ensures the availability of your data and information at all times.
Our lawcode suite complies with the rules for processing personal data and therefore complies with the General Data Protection Regulation and the Federal Data Protection Act. We process personal data exclusively in accordance with documented instructions and on your behalf as a processor.
All personal data in the lawcode Suite can be deleted in accordance with the requirements of the General Data Protection Regulation. This enables you to actually implement erasure requests and erasure concepts in compliance with the law.
Our lawcode Suite enables the implementation of an authorization concept. Only individual authorized persons are granted access to the sensitive information in the lawcode Suite. This allows you to meet data protection requirements and ensure the necessary confidentiality.
We offer every lawcode Suite user secure 2-factor authentication. Each customer receives their own separate lawcode Suite instance, which ensures stringent separation and processing of data.
Thanks to our end-to-end encryption, all sensitive information and data, such as business secrets, is encrypted in our HinSchG module. This means that the data arrives on our servers already encrypted so that neither we nor other third parties can read the information at any time.
Our customer support team will of course assist you with all IT security and data protection issues. We support you in processing the data protection rights of data subjects. We also support you in carrying out a data protection impact assessment and much more.