Security & data
Honest and concrete: this is how SBüro handles your data.
Server in the EU (Netherlands) — data protection under the FADP (DSG)
The data is stored on a server in the EU, in the Netherlands. Data protection under the Swiss Federal Act on Data Protection (FADP/DSG).
Access with a second factor
Sign-in with a personal access code and a second factor (code from an authenticator app), with backup codes for emergencies. Mandatory for owners and accountants, optional for employees. Codes are never stored in plain text, only as a hash.
Encryption
The connection is always encrypted (HTTPS). Security secrets such as the second-factor key are encrypted with a separate key for each business (AES-256); that key is protected by a master key kept outside the database.
Access log
If the operator accesses your business for support, every access is logged with its time. The log can only be added to, never changed or deleted — you can see it in SBüro.
Daily backup
Every night the database is backed up, encrypted and test-restored. 7 daily, 4 weekly and 12 monthly backups are kept.
Nothing without OK
No document or message leaves SBüro before you have approved it. The program checks this itself, not just the interface.
Proof of every approval
Every OK is recorded with the time, the user and a fingerprint (SHA-256) of the approved content. You can download the approval log per period or per document as CSV or PDF.
Amounts are calculated by the program
Totals, VAT and rounding are always recalculated. If a proposed amount differs, you see it clearly.
Data separated per business
Each business sees only its own data — separated in the database and checked with automated tests.
Your data belongs to you
You can download your documents at any time.
No advertising, no tracking cookies
This website sets no cookies. SBüro only uses the cookies needed for signing in.