Security & Privacy
Your data belongs to you — we protect it like our own
Immo Manager is built from the ground up for German data protection standards. AES-256-GCM encryption, servers in Germany, full GDPR compliance.
Security at every layer
Field-level encryption
Email credentials, API keys, and sensitive integration data are encrypted with AES-256-GCM. The master key (KEK) is never stored in the database.
Hosting in Germany
All production data is stored exclusively on servers located in Germany. No transfer to third countries without explicit consent.
TLS 1.3 in transit
All connections between your browser and our APIs use modern TLS encryption; the ImmobilienScout24 export runs over its HTTPS API and the OpenImmo export over SFTP or FTPS where the portal offers it. Immowelt accepts OpenImmo packages over unencrypted FTP only; that is the portal's requirement.
Strict multi-tenant isolation
Every company is an isolated tenant. A dual mechanism of repository specs and Hibernate filters prevents cross-tenant access at the database layer.
Audit logs
Security-relevant events (logins, permission changes, deletions) are tracked traceably and can be reviewed at any time.
Role-based access
Admin and user roles with granular control. Team members only see what they are authorized for — no accidental data leaks within your own company.
GDPR — not as a checkbox, but as an architectural principle
Questions about security?
We're happy to answer with technical details. DPA, security architecture, or specific compliance questions — write to us.
Contact security teamTry it with your next listing
Add a property, generate the exposé and take your first prospects through the pipeline – 14 days free, no credit card.
Try 14 days freeQuestions? Write to us: kontakt@immo-manager.io