Security & privacy
Your invoices, protected.
Invoices contain prices, customers and bank details. Here is how PeppolNavigator keeps them safe.
01
Data separated per company
Every company’s data is isolated; users only see the companies they are invited to.
02
Strong authentication
Passwords hashed with Argon2, login-attempt lockout and signed tokens.
03
Hardened web app
CSRF protection and a content security policy against injected scripts.
04
Traceable
An event timeline per document and logged administrator access.
In detail
01
Access
- Roles: administrator, user and API user
- Invite-only users per company
- Lockout after repeated failed logins
- Administrator support access is logged at every start and stop
02
Integrity
- SHA-256 checksum for every attachment in the UBL
- Validation before sending
- Duplicate detection on inbound documents
- PDF transmission receipt as proof of delivery
03
Privacy
- GDPR consent recorded per version of the terms
- Only essential cookies
- Data protection officer: dpo@automatize.eu
- Privacy mode: collapse invoice lines in the UBL
04
Engineering
- Automated dependency vulnerability checks (OWASP)
- Thousands of automated tests
- Database backups
- Separate sandbox and production environments
Hosting
Run by a Belgian company, hosted in Switzerland.
PeppolNavigator is run by Automatize BV in Belgium and hosted in Switzerland, in Infomaniak’s own Tier III+ data centres (Switzerland has an EU adequacy decision under the GDPR). Peppol delivery goes through the Belgian access point Ademico.
- 01Operator: Automatize BV, Heist-op-den-Berg
- 02Hosting: Infomaniak (Switzerland)
- 03Peppol access point: Ademico (Belgium)
- 04Two-factor authentication: coming soon
Ready for Peppol? We’ll show you in 30 minutes.
A live demo with your own invoice — no obligation.Get in touch →