We only store what’s necessary to keep the integrations running smoothly: encrypted API credentials, automation logs (including error details), automation settings, and aggregated statistics like the number of transactions and raw request logs. Rest assured, we never analyze or use the data that passes through our connectors.

The authentication details are kept encrypted at all times. We use a separate, highly secure server to store the keys that decrypt these credentials. Only a handful of authorized Albato employees can access this information for essential tasks like troubleshooting system issues. Under the GDPR, your clients can opt out of data storage at any time—but please note that doing so may disable some helpful features like automatic error retries.

We use best-in-class encryption measures: 256-bit AES encryption for data at rest and TLS 1.2 or 1.3 with AES 256 for data in transit. By following strict security and privacy standards, we ensure that only the actions needed to run your customers' automations are performed.

Yes, under the GDPR and our privacy policy, your customers' can request data deletion at any time. Just contact your software provider’s support team, and they’ll handle the request. Please note that deleting some data might affect features like error auto-retries.

Our infrastructure ensures high availability. In rare outages, we act fast to restore service. The software provider will get real-time updates and confirm immediately once the automations are back to normal.

Yes. We comply with the GDPR and maintain SOC 2 Type 2 certification. We also conduct regular third-party penetration testing and annual audits to ensure ongoing adherence to global security standards. For further details or compliance reports, contact us at info@albato.com.