Data protection & security

Your data.
Secure in Germany.

Where CLAPPO stores your files, how access is protected, how backups are made and which service providers are involved. Last updated October 12, 2026.

01 / Storage location

Where your data
is stored.

All systems are located in Germany.

01Database

Projects, comments, approvals and accounts are stored in our own database at Hetzner in Germany.

02Files

Images, videos, PDFs and attachments are stored in the file storage on the same servers in Germany.

03Operation

The servers run at Hetzner Online GmbH in Germany. Hetzner is certified to ISO/IEC 27001 (certification body SOCOTEC). The certificate applies to Hetzner and its data centers, where CLAPPO is operated. Operation and maintenance are handled by ELMACO.

Hetzner – ISO/IEC 27001:2022 certified

Source: Hetzner Online GmbH (pressroom). The certificate applies to Hetzner and its data centers, not to CLAPPO or ELMACO.

02 / Protection

How data
is protected.

01Encrypted transmission

All connections run over HTTPS. The server enforces the encrypted connection (HSTS).

02Encrypted backups

Backups are stored encrypted. Without our key they cannot be read.

03Secure access

Approvers sign in via a personal link. Sessions expire after 7 days. Repeated sign-in attempts are rate-limited.

04Roles and separation

Admin, team, client, approver and freelancer have clear permissions that the server enforces; what clients, approvers and freelancers may do is set by the workspace owner. Each client workspace is separated from the others.

05Support only with consent

Our support cannot simply look into your workspace. It asks with a reason, you allow access for at most two hours or decline, and you can end it at any time. Every request is logged.

06Protected files

Videos, PDFs, Office documents and attachments are delivered only via time-limited links. Images are accessible via random addresses that cannot be guessed.

07Further safeguards

The portal cannot be embedded in third-party sites. Passwords are never stored in plain text, only as a hash.

03 / Operations

Backed up and
monitored.

01Backups

The database and uploaded files are backed up daily and kept for up to 30 days. The backups are stored separately from the server in a storage location in Germany.

02Monitoring

Availability is checked externally around the clock. In the event of an outage, an alarm is triggered immediately. Errors are reported to Sentry (EU), without names or email addresses.

04 / Service providers

Who is
involved.

Service providerTaskLocation
Hetzner Online GmbHServers, database, file storage, backups, conversion of Office documents to PDFGermany
Brevo (Sendinblue GmbH)Email deliveryBerlin, EU
SentryError monitoringFrankfurt am Main
StripePayment processing on bookingIreland

Details and legal bases are set out in the privacy policy.

05 / Common questions

Asked briefly.
Answered clearly.

Where is our data stored?

In Germany. Servers, database, uploaded files and backups are hosted by Hetzner Online GmbH in Germany, a provider certified to ISO/IEC 27001. Operation and maintenance are handled by ELMACO.

Is there a data processing agreement?

Yes. Since we process data of your clients and employees on your behalf, we conclude a data processing agreement (Art. 28 GDPR) with you on request, including a description of the technical and organizational measures and a list of service providers. Email us at hello@clappo.de.

Do approvers have to register?

No. Approvers sign in through a personal link sent by email. There is no password that could be lost or passed on.

What happens to our data if we cancel?

After the contract ends, you can still export your data for 30 days. After that we delete it. It remains in backups for up to 30 more days and is then deleted as well.

What happens if I delete a file by accident?

Deleted projects, files and versions stay in the trash for 30 days, where you can restore them with one click. After that they are removed permanently; backups keep them for up to 30 more days.

Where does the data go if we connect Slack or Teams?

Only if you switch the feature on yourself. CLAPPO then sends a short message to your channel: type of event, project name, file name, for comments the first 80 characters, and a link that only works after signing in. The message lands in your own Slack or Teams workspace.

Try it free, no strings attached
14 days.

No risk, no credit card. We set up your trial account personally.

You are not testing in an empty environment: your account comes with sample projects, images, comments and approvals, so you see right away how CLAPPO works day to day.