Security and trust, by design
Protecting your employees' data is our absolute priority. Discover our protocols, compliance and commitments.
Four pillars of protection
End-to-end encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). No interception possible.
European hosting
Data hosted in France (OVHcloud / Scaleway). Digital sovereignty guaranteed, no transfer outside the EU.
Granular access control
Enterprise SSO, MFA, roles and permissions per community. Every access is traced and auditable.
Trip anonymisation
Location data is pseudonymized. No data resale, no advertising profiling.
GDPR at the heart of our architecture
We apply GDPR principles from the design of every feature. Privacy by design, privacy by default.
- Full GDPR compliance — processing register kept up to date
- Internal DPO and breach notification procedure within 72 hours
- Right to erasure and data portability on request
- Explicit consent for location sharing during trips
- Data minimization — only what is necessary
- Annual security audits by independent third parties
Breach notification
Procedure for notifying the relevant authority and affected individuals within 72 hours.
Continuous monitoring
Real-time security monitoring, intrusion detection and incident response.
Independent audit
Penetration tests and security audits conducted each year by trusted third parties.
A question about your data security?
Our DPO and security team are available to answer all your technical and regulatory questions.
Contact our security team