Skip to content

Security & trust

Your data, secure and GDPR-compliant.

CasaHero manages sensitive tenant and management data. That is why security, privacy and verifiability are built in from the ground up — not bolted on afterwards.

  • GDPR-compliant
  • Hosted in the EU
  • End-to-end encrypted

Six pillars that together provide a robust level of protection.

How we protect your data

EU hosting

Data stays in Europe — preferably in Germany.

  • Hosting exclusively in the EU, preferably Germany
  • Cloud-Act-free: EU data sovereignty required of every service
  • Error monitoring via Sentry in the EU region

Encryption

Encrypted in transit and at rest.

  • TLS 1.3 for every connection (encryption in transit)
  • AES-256 for stored data (encryption at rest)
  • Dedicated key management

GDPR-compliant

Data protection under European law, contractually secured.

  • Data processing agreement (DPA) per tenant
  • Data-subject rights: access, erasure, portability (Art. 20)
  • Record of processing activities under Art. 30

Strict tenant isolation

Every manager sees only their own data.

  • Row-Level Security (RLS) in PostgreSQL at the database level
  • Every request runs in the context of exactly one tenant
  • Super-admin access to tenant data is logged

Secure sign-in

Modern authentication with a second factor.

  • Token-based authentication (JWT)
  • Two-factor authentication via TOTP
  • 2FA mandatory for admins, optional for all users

Backups & availability

Regular backups and a clear recovery plan.

  • Daily backups
  • 99.5% availability (SLA)
  • Disaster-recovery plan

Complete audit log & Your data belongs to you

Complete audit log

Who reported what and when, who worked on it and when — every relevant action is logged (record of processing under GDPR Art. 30). This creates verifiability in disputes and transparency for both sides.

Your data belongs to you

You can export your data at any time — as CSV/Excel for tabular data, PDF for documents, JSON for structured system migration or as a combined ZIP. No lock-in.

In preparation

Our path to TÜV certification

TÜV certification is a declared goal of CasaHero — we build the platform with the underlying requirements in mind from the start. We will only communicate a certificate once it is actually granted, and we do not advertise something we have not yet achieved.

Get started

Ready for a relaxed tenant–management relationship?

Try it free for 30 days. No credit card required.