Security and data

You put your customers’ names, addresses, invoices and photos into the app, and you are responsible for them towards your customers. This is how we look after them. Only what we can stand behind.

Try free for 90 days Book a call

Access to materials and financesDefault per access role. You switch each tick on or off per employee.

Access to materials and finances
	Foreman	Journeyman	Apprentice	Office
Can see cost prices	No	No	No	Yes
Can see DB1 / profit per job	No	No	No	Yes
May approve wholesaler invoices	Yes	No	No	Yes
May create purchase orders	Yes	No	No	Yes
May handle leads	Yes	No	No	Yes
May mark tasks as done	Yes	Yes	No	No

The default roles under Team in the app (shown in Danish there). An apprentice never sees cost prices or profit, even if the tick is set.

How we look after it

In plain words where possible. Open a topic for the details. The legal side is in the data processing agreement.

Where your data is keptThe database is in the EU · A backup every day · Sub-processors · The AI is not trained on your data

The database is in the EUWith Supabase in Ireland. The app’s servers run in Dublin.
A backup every dayA full copy of the database is taken every day. The copies are also kept in the EU.
Sub-processorsSome providers, for example for AI, SMS, telephony, email and payments, process data outside the EU, mostly in the USA. This happens under the EU’s standard contractual clauses. They are all listed in the data processing agreement, and you are told at least 30 days before we start using a new one.
The AI is not trained on your dataThe AI providers process data on our behalf and may not use it to train their models.

Encryption and signaturesEncrypted connection · Keys and CPR numbers · Signatures on quotes

Encrypted connectionAll traffic between the app and the server is encrypted (HTTPS).
Keys and CPR numbersAccess to your accounting and payroll software and your employees’ CPR numbers are stored encrypted (AES-256).
Signatures on quotesThe customer signs digitally with a simple electronic signature under the EU’s eIDAS rules. We store a fingerprint of the document, so a later change can be detected. You can require an SMS code before the customer can sign.

Your customers, your responsibilityData processing agreement · AI phone conversations · When a customer wants to be deleted

Data processing agreementYou accept it in the app. It sets out what we may do, who we use, and that you are told no later than 48 hours after we become aware of a security breach.
AI phone conversationsTranscripts and summaries of the conversations are deleted automatically after 90 days. We do not store the audio ourselves. It stays with the telephony provider and is only fetched when you play it.
When a customer wants to be deletedContact us and we will delete the customer’s details across the system. Invoices and anything else that has been booked stay for as long as they must be kept.

Your data, whenever you wantDownload everything · Delete the account

Download everythingYou can always download all your company’s data: as one zip file with a CSV file per table that opens in Excel, or as JSON. Photos and attachments come as links. It also works if your subscription is paused or cancelled.
Delete the accountThe owner can delete the company account and all its data under Settings.

Operations and monitoringChecked every quarter of an hour · Errors are collected · Who did what

Checked every quarter of an hourEvery 15 minutes we automatically check both the public pages and the app itself as a logged-in user. If something goes wrong, we get an SMS.
Errors are collectedErrors in the app are collected automatically, so we see them and can fix them.
Who did whatThe app keeps a log of important actions. Changes to hours are kept as history, even when an entry is deleted.

Whether the app is running right now is shown on our status page (in Danish) at onlineerhverv.dk/status. The legal side is in the data processing agreement, the privacy policy and AI transparency (the legal texts are in Danish). Questions? Call 93 94 12 06 or write to hej@onlineerhverv.dk.

Who can see what

Only your company can see your data, and inside the company you decide what each employee may do.

Only your companyEach company’s data is kept apart by rules in the database itself, not only in the app. Another company cannot see your customers.
Roles per employeeYou decide what each employee may do: see material prices, see the job’s contribution margin, approve invoices, handle enquiries and more.
Pay is locked down furtherAn employee cannot read colleagues’ pay or bank details, not even by going around the app and querying the database directly. We have tested this with an employee login.

Same job, two rolesJob: New bathroom

Example

Same job, two roles
Field	Owner	Apprentice
Customer, address and task	Shown	Shown
Cost price of materials	12,980 DKK	Not shown
Contribution margin on the job	18,420 DKK	Not shown
Colleagues’ pay and bank details	Shown	Not shown

Example with made-up amounts. The owner and the apprentice open the same job.

Questions about security and data

If your question isn’t here, call 93 94 12 06.

Does a digital signature hold up?

A simple electronic signature has legal effect under the EU’s eIDAS rules and can be used as evidence. We store a fingerprint of the document with the signature, and you can require an SMS code before the customer can sign.

What happens to my data if I stop?

You can download all your data as files, also after you have cancelled. The owner can delete the company account and all its data under Settings.

What happens if Online Erhverv closes down?

You can always download all your data as files. If you have connected e-conomic, Dinero or Billy, your invoices are already in your own accounts.