Resources / Application security
Your data. Carefully protected.
Buildings, people and financial records deserve careful handling. Here is how Nestio protects the information you entrust to the app.
Privacy policyInside the application
Hosted in the European Union
The Nestio application is hosted on servers in the European Union. Connected services handle specific tasks such as email delivery and payments. The data shared depends on the features you use.
Access checked at the database
Database policies and application permissions check workspace membership, ownership and the selected workspace. Field checks the office and assigned collector before exposing trips or recording payments.
A verified way into the app
Manager sign-in uses secure authentication. Residents have a separate sign-in flow with email verification codes that expire and limit failed attempts. Resident sessions use cookies protected from JavaScript access and sent over secure connections in production.
Protection for sensitive credentials
Connections use HTTPS/TLS. Stored payment gateway credentials and supported banking refresh tokens are encrypted with AES-256-GCM, using keys supplied to the server through its environment.
Backups & data recovery
Backups are part of our process for protecting customer data. Our database maintenance procedure includes taking a full backup before significant changes, checking that it can be restored and keeping a recovery path if something goes wrong.
Clear handling of personal data
Our privacy policy explains what we collect, why we use it and which service providers help operate Nestio. You can contact us to request access, correction or deletion of personal data. Retention requirements are described in the policy.
Privacy policyTalk to us about security
Have a security question, need processing details for your office, or want to report a concern? Contact the Nestio team at info@nestio.gr.
info@nestio.gr