Access only after login
The workspace cannot be indexed publicly. Protected pages require a valid session; sensitive client portals use separate links that cannot be guessed.
Security
Business data deserves clear boundaries.
Security is not a single seal. It comes from access control, cleanly separated data, traceable workflows and responsible operation.
As little access as necessary
Technical development follows the principle of limiting data access to the workspace in question and the specific task at hand.
Traceable actions
Status changes, sending and relevant work steps stay traceable on the related document instead of disappearing into loose side processes.
Backup and export
Sumaro offers backup and export options for business data. Which retention periods apply depends on the individual case and its professional assessment.
Transparency
What this page deliberately does not promise.
Sumaro claims neither a GoBD certification (GoBD: the German rules for proper digital bookkeeping) nor any blanket promise of compliance. Such claims would oversimplify professional, technical and operational requirements to an unacceptable degree.
Safe use also depends on your side: strong login credentials, carefully assigned permissions, correct master data and suitable internal procedures.
Specific details on hosting, sub-processing, deletion periods and contact routes are documented in the full privacy policy and verified before the public product launch.
The next step
Put Sumaro to the test with a realistic workflow.
Start with sample data and take your time deciding whether Sumaro fits your requirements.