Your data protected to the most demanding standards
Napta is ISO 27001 certified. Our technical and organisational measures protect your sensitive data and guarantee the continuity of our services at all times.
%201.png){kind=logo}
.svg)
.svg)
Compliant with the strictest audits
GDPR compliant
Personal data handled in line with European regulation.
ISO 27001 certified
The international standard for information security management.
Hosted in Europe
Your data stays on European soil. Guaranteed sovereign infrastructure.
Hosting and Infrastructure
Our clients' data is hosted on Amazon Web Services in the Frankfurt region, at the heart of Europe. In the event of an incident, we operate across the region's three availability zones to ensure uninterrupted service continuity.
GDPR compliant
Personal data handled in line with European regulation.
ISO 27001 certified
The international standard for information security management.
Hosted in Europe
Your data stays on European soil. Guaranteed sovereign infrastructure.
End-to-end, multi-layered protection
AES 256 encryption
Client data is encrypted in transit and at rest with AES 256. Communications are secured via HTTPS TLS 1.2, and keys are rotated annually via AWS Key Management Service.
One database per client
Each client has their own dedicated database. This isolation guarantees that no data can be exposed to other organisations, with encryption applied at server level.
Controlled and logged access
Every data access is authenticated and logged, whether by users or by internal access reserved for Napta teams. Access logs support compliance obligations.
Connects seamlessly with your existing IT system.
Napta is made to easily communicate with your entire IT system.
Providing continuous sychronisation to ensure our zero friction policy.
Your data kept for as long as needed, deleted when it should be
Daily back-ups
Full back-ups are performed every day, supplemented by continuous back-ups throughout the day. They are regularly tested in a pre-production environment to guarantee their integrity.
Data deletion
At the end of the contract, all client data is deleted within a maximum of 30 days. This procedure applies to all data, including back-ups.
A secured software from code to infrastructure
Our teams are trained in the best practices defined by the OWASP Top 10. Code analysis tools (SonarQube) and vulnerability detection are built into our CI/CD pipeline to identify and fix any flaws before deployment to production.
Our infrastructure relies on AWS GuardDuty for anomaly detection and AWS WAF for protection against DDoS attacks. Access is controlled on the principle of least privilege, and any change follows a rigorous change management process.
Cyber incident management
In the event of a data breach or security flaw, we alert our clients within a maximum of 24 hours. A dedicated communication channel is set up to provide all necessary information and corrective measures.
Our clients' trust, in numbers
Professional services firms are transforming under real pressure: on margins, on metrics, on skills. Napta helps them outperform, not just keep pace.
A go-to trusted solution
Easy to get up and running
Support that's always responsive
Turn resource management into the best business outcomes
A 100% free and no-commitment meeting to understand what Napta can help you with.
