Trust Center
A clear overview of how we handle your data. No empty promises, only what we have verified.
What we guarantee
Hosting
The application runs on Vercel. The database, storage and authentication run on Supabase, in the EU region Frankfurt (eu-central-1), on PostgreSQL 17. Your data stays within the EU.
Encryption
Traffic to and from TelMaar runs over HTTPS/TLS. Data is stored encrypted (encryption at rest) by our database provider.
Backups
Our database provider makes automatic backups.
Retention
Data is retained for as long as your account is active, and deleted after termination in accordance with the data processing agreement. More details are in our data processing agreement and privacy statement.
Availability
We monitor availability with an external monitor via our status endpoint.
Subprocessors
The parties that process data on our behalf, and for what purpose.
| Name | Purpose | Region |
|---|---|---|
| Vercel Inc. | Hosting | EU / VS |
| Supabase Inc. | Database, storage and authentication | EU (Frankfurt, eu-central-1) |
| Resend | Transactional email | EU / VS |
| Mollie B.V. | Payment processing of customer invoices (Mollie) | EU (Nederland) |
| Stripe | Subscription billing for TelMaar itself (Stripe) | EU / VS |
| Anthropic PBC | AI assistance: questions to the assistant, receipt recognition and posting suggestions | EU / VS |
| Functional Software Inc. (Sentry) | Error reports from the application, stripped of personal data | EU |
ISO 27001
In progressTelMaar is not yet ISO 27001 certified. We work according to the principles of the standard and are on our way to certification. This is a project in progress, not an achieved certification.
This page describes the current state as verified with our providers. Questions about security or data processing? Get in touch with us.
Frequently asked questions about data and security
Where is my data stored?
The database, storage and authentication run at Supabase in the EU region Frankfurt (eu-central-1). The application itself runs at Vercel. Traffic goes over HTTPS/TLS and data is stored encrypted.
Who can see my data?
Only the people you give a role within your company, and only what that role allows: a technician sees their jobs, not prices or banking. The sub-processors who process data on our behalf are listed above with name, purpose and region.
Can I take my data with me if I leave?
Yes. You export your bookkeeping as an XAF audit file and your invoices as UBL or PDF, and through the GDPR desk in the portal you request access or deletion. After termination, data is deleted in line with the data processing agreement.