Security and data
Your figures stay yours. We only read them.
Profflow reads your bank statements, your accounting program and your payroll to show you the picture and help you decide. It cannot pay, transfer or change anything. Here is where the data is kept, who sees it and what happens to it.
- Access to money
- None
- Where the data is kept
- EU, Frankfurt
- Declarations
- You file them
- Contract
- Data processing agreement
- 01
Read only
Profflow reads. It has no way to make a payment, move money or change a record in your bank or your accounting program.
- 02
Kept in the EU
Company data is kept in a database in Frankfurt, Germany. Each company is separated from the others by access rules inside the database itself. Everything travels encrypted (HTTPS).
- 03
Your accounting key
The API key you paste from Merit, SmartAccounts, Directo or SimplBooks is used for the read and kept only in your browser tab until you close it. It is not saved on our servers.
- 04
The check runs in your browser
A statement uploaded on profflow.ee/check is read in your own browser. Nothing is stored and nothing is sent to us.
- 05
You decide who sees what
The owner invites people with a role: CFO, accountant or manager. Salaries are seen only by the owner, the finance manager and the accountant.
- 06
What the AI is told
When you ask the AI CFO, the language model gets sums and the engines’ own words, such as a cost category or a kind of tax. No names, personal codes, account numbers or contacts.
- 07
Your data goes with you
All of the company’s data can be downloaded as one file in Settings. What happens to the data when the contract ends is set in the data processing agreement.
- 08
Sign-in
Passwords have at least 12 characters, with letters and digits. Access to the company opens only after the account is activated.
- 09
No links in our letters
Our letters to companies come from addresses at profflow.ee and contain no links: the next step is a reply. Only the sign-in and invitation emails you ask for carry a link, to profflow.ee only. A message in our name you did not ask for, with a link or a password field, is not from us.
Banks
Today the bank data comes from the statements you import. Direct bank connections will go through a licensed account information provider, with your consent in your own bank, and also only read.
The documents
A question we have not answered?
Write to us and we answer in writing, before you sign anything.
Ask a question