Data security and privacy

Your accounting data are confidential. This page explains, in plain words, how CFO Panorama keeps them safe. The binding commitments are in the Data Processing Agreement your admin accepted; you can download it under Settings → Legal documents (see Legal documents and company details).

Where the data are kept

• The application, its database, the uploaded files and the backups run on Google Cloud in the EU, in the Frankfurt region (europe-west3, Germany).
• The suppliers that help run the service (for example the provider that sends invitation and password e-mails) are listed in the Sub-processors (PDF) on the Legal documents page.

Each client's data stay separate

Every record of business data belongs to one client group. The separation is enforced twice:

• in the application — every page and every download reads only the group you are working in; asking for another group's record answers as if it did not exist;
• in the database — row-level security lets each request see only the rows of its own group, even if the application made a mistake.

Who can see your data

• Your members only, by role. Admins manage the group, editors upload and map, viewers read the reports. See Members and roles. Nobody is added to a group without accepting the invitation.
• Two-factor sign-in. Every member of a client group signs in with a password and a code from an authenticator app. Sensitive actions — inviting or removing members, accepting the terms, requesting deletion — ask for a fresh code.
• CFO Panorama support, within the agreement and always recorded. A few platform users can open your group to set it up or diagnose a problem; see Support access and data handling. Every time they do, it is logged, and your admins read the log under Settings → Platform access log. See Platform access log.

Your accounting system stays as it is

CFO Panorama only reads. Your accountant keeps working in POHODA or Money S3 exactly as before; nothing is ever written back to the accounting system. Uploaded exports are stored as they arrived, so every figure can be traced back to its file.

No training, no pooling

Your data are used only to produce your reports. They are never used to train AI models and never pooled with other clients' data — no aggregated statistics or benchmarks are made from them.

What is recorded

Imports, mappings, journals, period locks, budget approvals, member changes, legal acceptances and downloads are written to the group's audit log. The log cannot be edited or deleted from the application, and the record of your legal acceptances is chained so that a change would show.

How long data are kept, and deletion

• Your data and their history (imports, mappings, journals, members) stay as long as you use the service. Records of platform access and of report downloads are kept for 90 days.
• An authorised admin can ask for the deletion of all the group's data under Settings → Legal documents → Request deletion of all company data, with or without a 30-day read-only export period first.
• After that, the data are deleted from active systems without undue delay, stored files included, and you receive a confirmation. Automatic backups expire within 7 days and residual copies at suppliers within 180 days. The acceptance record and the record of the deletion are kept for at most 3 years.

Demo groups

The demo groups contain generated data only, not data of real companies. They are read-only for everyone.