Commercial information deserves careful handling.
When you use doitec, you entrust us with information about your business goals, activities and customers. We continuously improve security and clearly distinguish documented controls from work in progress.
Where is data hosted?
Our primary Supabase database is configured in Stockholm, Sweden (EU region eu-north-1). Other providers and integrations may process data elsewhere. We therefore do not claim that all processing occurs within the EU/EEA.
Sign-in and access
doitec supports passwordless email-link sign-in and company-based user roles. Company information should be accessible only to authorized users. Controls are reviewed and tested as part of our ongoing security work.
Infrastructure and payments
Our providers include Vercel for hosting, Supabase for database and authentication, and Stripe for payments. Their security attestations cover their services, and do not certify doitec itself.
Optional integrations
Customers choose whether to connect CRM or meeting services. We aim to limit access to what is necessary and review permissions, storage and deletion before launching new integrations.
Our security work
We maintain documented routines for access reviews, security advisories and incident response. An external penetration test and comprehensive independent audit have not been documented as completed. doitec does not hold its own SOC 2 attestation or ISO 27001 certification.
Privacy
We process personal data under applicable privacy law and maintain work on processing agreements and procedures for access and deletion requests. Contact us for relevant agreement documents and subprocessor information.
Security questions?
Contact support@doitec.no. Do not send passwords, access keys or sensitive contents in your initial email.