Backups are securely stored and encrypted for 14 days. Production backups are additionally geo-redundantly replicated to an EU paired region. Point-in-time recovery is available with a granularity of 5 minutes.

Data is immediately deleted from active systems. Backups remain securely encrypted for 14 days and are then permanently erased.

Yes, we fully comply with GDPR requirements. Customers can sign a Data Processing Agreement (DPA), and we offer transparent options for data control and deletion. All data is exclusively processed and stored in the EU (Ireland).

absentify protects your data with ISO 27001-certified management systems, Microsoft 365 App Certification, and advanced encryption technologies (AES-256 for data at rest, TLS 1.2+ for data in transit). All backend services are connected via Private Endpoints within an isolated network, protected by a Web Application Firewall and continuous threat detection via Microsoft Defender.

All customer data is processed and stored in the Microsoft Azure North Europe region (Ireland). Geo-redundant backups are replicated exclusively within the EU. No data processing takes place outside the European Economic Area.

Access to production data is restricted exclusively to top management. Developers have no direct access to production databases. All access attempts are logged and regularly reviewed. Multi-factor authentication is required for all administrative access.

Yes, penetration tests are performed at least annually by independent third parties. Additionally, automated vulnerability scans are conducted monthly, along with continuous security monitoring via Microsoft Defender for Cloud.