Security at every layer
Field-level encryption
Email credentials, API keys, and sensitive integration data are encrypted with AES-256-GCM. The master key (KEK) is never stored in the database.
Hosting in Germany
All production data is stored exclusively on servers located in Germany. No transfer to third countries without explicit consent.
TLS 1.3 in transit
All connections between your browser, our APIs, and external marketplaces (Scout24, Immowelt) use modern TLS encryption.
Strict multi-tenant isolation
Every company is an isolated tenant. A dual mechanism of repository specs and Hibernate filters prevents cross-tenant access at the database layer.
Audit logs
Security-relevant events (logins, permission changes, deletions) are tracked traceably and can be reviewed at any time.
Role-based access
Admin and user roles with granular control. Team members only see what they are authorized for — no accidental data leaks within your own company.
GDPR — not as a checkbox, but as an architectural principle
Questions about security?
We're happy to answer with technical details. DPA, security architecture, or specific compliance questions — write to us.
Contact security teamReady to simplify your day-to-day?
Get started in under 5 minutes — no credit card. Full feature access, no commitment. Decide after the trial if you want to stay.
Questions? We're here to help.
kontakt@immo-manager.io