Security
Your workers’ data deserves more than a password
Soft-TLS holds personal, medical and commercial data. This page explains how it is protected, who can see it, and how you keep control.
Hosting and backups
[[OWNER: hosting provider and location]]. Encrypted connections (TLS) for every user and every terminal. [[OWNER: backup schedule and retention]]. Dedicated hosting for Enterprise customers on request.
Access control
Two-factor authentication with an authenticator app, backup codes and trusted devices. Rights are granular per user and grouped in roles; medical and financial data have their own rights. Every company’s data is scoped; partners see only what is shared in the partnership.
Traceability
Business changes are recorded in an audit trail with before and after values, actor and timestamp. Records are soft-deleted and can be restored. Concurrent edits are detected so nobody overwrites a colleague’s change unknowingly. Authentication events are logged.
Data protection
Personal data is processed on your instructions under a data processing agreement, available on request. Erasure requests are supported, including the audit trail. Legal documents and their acceptance by users are recorded.
AI usage
AI drafting is configured per company by your administrator, including the provider and model. The AI proposes drafts for risk assessments, incident reports and safety instructions; a person reviews and saves. Usage and cost are visible per company. AI-assisted records stay marked in the audit trail.
Documents stay on our infrastructure
Scanned certificates and ID documents are stored and processed on infrastructure we operate. The upcoming document recognition runs there too, without third-party OCR or AI services.
Questions about security?
Security questionnaires, data processing agreements and technical details for your IT department: write to info@soft-tls.com or use the contact form.