Security & Privacy

As a tax advisor, you are bound by professional secrecy. That is why we disclose where your data is stored, which contracts we provide and how we use technology and AI.

Where your data is stored

Data	Provider	Location
Client portal, documents, accounts	Supabase	EU (Frankfurt)
Firm websites	Hetzner Online GmbH	Germany
Encrypted backups	Hetzner Object Storage	Germany
IsarAgency website and platform	Vercel	EU (Frankfurt) / Edge
Transactional emails	Resend	USA (EU Standard Contractual Clauses)
AI-assisted texts and reports	Anthropic	USA (EU Standard Contractual Clauses)

The complete list of all processors, with purpose, location and contract, is in our privacy policy. Privacy policy →

Contracts

Data processing agreement (Art. 28 GDPR) for every firm.
Confidentiality agreement under § 62a StBerG: currently being prepared and concluded before any client data is processed.
Monthly cancellation; full data export on request.

Use of AI

We use AI for website texts, reports and answering general enquiries.
We use it exclusively through the providers' business APIs. Under their terms, data sent via the API is not used to train the AI models.
AI output is reviewed by people; responsibility for quality and decisions stays with us.

Technical and organisational measures

TLS encryption for all data transfers.
Database-level access rules (Row Level Security): each firm sees only its own data.
Daily AES-256-encrypted backups in Germany.
Access to personal data only for the owner and explicitly authorised service providers.
Deletion of all data 90 days after the end of the contract, unless a statutory retention obligation applies.

Security questions

Write to us at datenschutz@isaragency.de.