You entrust us with your figures, so you deserve to know exactly how we handle them. On this page we explain every measure: where your data lives, how it is encrypted, how strictly it is separated per organisation, how we back up and restore, and who can and absolutely cannot access it. No vague reassurance, but the actual architecture.
All your figures live in one European data centre, not spread across the world. We deliberately chose the European Union, so your entity falls under European privacy law (the GDPR) and not under foreign legislation that could compel access.
Your database runs in the Frankfurt region (AWS, eu-central-1), inside the European Union. The physical data centre belongs to Amazon Web Services, one of the most heavily secured and best certified infrastructures in the world (including ISO 27001, ISO 27017/27018 and SOC 1/2/3).
Your financial data is not quietly copied to other continents. Storage and processing stay within the EU. That is a fixed architectural choice, not a setting that could accidentally be flipped.
Because your data lives in the EU, European privacy law applies. We sign a data processing agreement with every supplier we use, so they are bound by the same rules.
This is the most important measure of all. Easyclose is a shared environment in which many companies work side by side, but each organisation sees only its own figures. That separation does not sit in the app code (which could contain a bug), but one layer deeper: in the database itself.
Every table with customer data carries an organisation marker. On every single row the database applies a rule ("Row Level Security") that only lets through rows belonging to your organisation. A query for someone else's data simply returns nothing, not because the app politely hides it, but because the database refuses it.
The app and the AI connection always access the database with your personal login and your permissions, never with an all-powerful "master key". Such a master key (a service-role key) never ends up in your browser or in our public code; secrets stay on the server.
We run automated tests that explicitly prove organisation A cannot read, write, change or delete organisation B's data. That isolation test is part of every change, so the separation demonstrably stays intact.
Encryption means your data is unreadable to anyone who intercepts or steals it. That applies at two moments: while your data travels across the internet, and while it sits on disk.
All connections run over encrypted HTTPS (TLS). Between your browser and the server, nobody can read or tamper with the traffic. Unencrypted traffic is not allowed.
The stored database and the backups are encrypted at disk level (AES-256). If someone were to physically get hold of a disk, all they would find is unreadable data.
We never store your password as readable text. It is one-way encrypted (hashed). Even we cannot read your password back; if you forget it, you send yourself a recovery link.
Access starts with certainty about who you are. We use a proven authentication system and give you the controls to secure your account even further.
An account only becomes active after you confirm your email address. That way you know for sure that only the owner of the address gets access.
You can switch on two-factor authentication: alongside your password, Easyclose then asks for a code from an authenticator app. Even with a leaked password, an attacker cannot get in.
Forgot your password or want to change it? That runs through a recovery link to your own email address, not through a phone call or an unsecured form.
Within your organisation you give team members a role (owner, administrator or reader). So you decide who may set up, who may edit and who may only view.
Your session expires and can be re-verified. So access is never valid indefinitely.
We store all amounts as whole cents (integers), never as floating-point numbers that can round off. That prevents creeping rounding errors; your figures stay reliable to the cent.
Security is not only about keeping people out, but also about not losing anything. Should something ever go wrong, an outage, a human error, your data must be recoverable.
The database is backed up automatically and periodically. You do not have to do anything for it; it happens in the background, every single day.
Backups are kept for a while, so that after an outage or a human error we can fall back on an earlier, good state of your data.
The backups are encrypted too and stay within the EU. A copy is not a back door: the same protections apply as to the live data.
An honest answer to the question you are really asking: can someone at Easyclose just look into my figures? No. We have deliberately kept administration and data access strictly separate, and everything sensitive is logged.
Platform administration (organisations, plans, usage statistics) is deliberately separated from your financial data. Easyclose staff have no access to the figures in your entity; administrative tasks happen without access to your entries, P&L or balance sheet.
There is no button or route that lets anyone at Easyclose open your financial figures. If you need help, you create an export yourself and share exactly what is needed.
Sensitive administrative actions are recorded in a log that can only grow and cannot be changed or erased (append-only). So it is always possible to establish afterwards who did what.
Accounts with administrative rights on the platform must be secured with two-factor authentication. Administrative rights also run through the same database rules, never through a master key in a browser.
Security also means freedom: you are not tied to anything. We deliberately build on standard technology, so you can always take your data with you.
You can download all your organisation's data as one file. So you always hold your own, complete copy.
No integration with your accounting package? Then you simply import your audit file or Excel. A missing feature never holds you hostage; the exit route is always open.
Whether you use the built-in AI assistant or connect your own AI through the MCP server: the same protection applies in full. In Easyclose, AI is never a detour to seeing more.
Every AI connection works with your login and your permissions. The database rules that protect you also constrain the AI: never any access outside your organisation and entities.
The MCP connection can retrieve and analyse your figures, but never change, book or delete anything in them. So nothing can break through the AI.
Want to know more about your own AI on your own figures? Read the guide to the MCP connection.
We do not do everything ourselves, but we choose our suppliers with care and keep the chain transparent. With every party that processes data, we sign a data processing agreement.
The database, authentication and separation run in AWS Frankfurt (EU). This is where your entity lives, safely within the European Union.
The website and app are served through a specialised hosting provider, with protection against attacks and abuse (firewall and DDoS protection) built in. Your financial data itself does not live here, but in the secured database in the EU.
Transactional email (verification, recovery) runs through a processor with EU sending. We never send along more data than the email needs.
To spot outages quickly we use error monitoring in the EU region. It focuses on technical errors, not on reading your figures.
With every supplier in this chain we record the arrangements in a data processing agreement (GDPR). They may only process your data for the service, not for their own purposes.
Your figures are not sold, not shared for advertising and not used to train AI models. They exist for your reporting, full stop.
Want to look around first, no strings attached? The demo on the site runs entirely in your own browser, with fictitious figures. Nothing is uploaded and no account is needed. Only when you create an account yourself and import your own figures does data enter the secured environment described above.
Missing something, want to see our data processing agreement, or think you have found a vulnerability? Let us know. We take reports seriously and respond quickly.
No. The separation between organisations is enforced in the database itself with Row Level Security, not just in the app. A query for another organisation's data returns nothing; the database refuses it. We prove this with automated isolation tests.
Yes. The database runs in the AWS data centre in Frankfurt (region eu-central-1), inside the EU. That is a fixed architectural choice. Backups and email stay within the EU too.
No. Platform administration is fully separated from your financial data and there is no route that lets an Easyclose employee open your entries, P&L or balance sheet. If you need help, you create an export yourself and share exactly what is needed.
The database is backed up daily and those backups are kept for a while. In the worst case we can fall back on an earlier, good state of your data. On top of that, you can always download a full export of your data as your own copy.
Your password is never stored as readable text, but one-way encrypted (hashed). Even we cannot read it back. You can secure your account further with two-factor authentication (2FA).
No. Your figures are not sold, not used for advertising and not used to train AI models. AI features also work read-only and with exactly your permissions, so the AI never sees more than you do.
No. You can export all your data in one file and take it with you at any time. Even without a direct integration with your accounting package, you simply work via import. The exit route is always open.
Thank you for reporting it. Email us at hallo@easyclose.nl with as much detail as possible. We take reports seriously, respond quickly and will let you know as soon as it is resolved.