How we protect your data.
Where your data lives, who can reach it, what we log and what we are certified for today — for DEP Scheduler and for Business Operations Services.
Isolated by design, hosted in the EU.
Every client gets its own installation boundary. Higher tiers add network privacy; they never change how your data is separated.
EU hosting
Microsoft Azure, Germany West Central. Your schedules, requirements and availability are stored there and nowhere else.
Isolated on every tier
Your own storage account, secret vault, workload identity and authentication realm — on T1, T2 and T3 alike.
Logs without personal data
Logs carry operational metadata such as identifiers and durations, never schedules or availabilities.
A complete change log
Every saved edit is recorded — before, after, who, when, the rule warnings shown and the note given — and the log is append-only.
Network privacy by tier
Data and identity isolation are identical on every tier. Tiers differ in network privacy, redundancy and logging.
| T1 Low | T2 Standard | T3 Premium | |
|---|---|---|---|
| Network access | Firewall and identity-based access | Own network segment and private link to storage | Fully private data access: private endpoints for storage and the secret vault |
| Storage redundancy | Locally redundant | Geo-redundant | Geo-redundant |
| Logs | Shared, tagged per client | Dedicated | Dedicated, with alert rules |
| Container registry | Shared | Dedicated | Dedicated |
People you can vet, data that stays in the EU.
Our employees, in Portugal
Agents are DEP employees on EU contracts, working from our premises — not a subcontracted pool.
Your data stays in the EU
Delivery runs from Portugal under the GDPR, and your data stays inside the European Union.
Your tools, your data
We can work inside your own helpdesk and CRM, so customer data never leaves your systems.
Service levels in writing
Targets, measurement and service credits are agreed in writing before we start.
What we hold, stated plainly.
GDPR
We operate under itDEP is an EU-registered company in Portugal and handles personal data under the GDPR.
ISO 27001
Not certifiedWe do not hold ISO 27001 today. We will tell you the moment that changes.
SOC 2
Not certifiedWe do not hold a SOC 2 report today.
Your security review
SupportedWe answer security questionnaires and support client security reviews; dedicated audit work is scoped with you.
Need something for your security team?
Send us your questionnaire or your questions. We answer in writing, and we say so when the answer is no.