You read what we read.
Every action in your environment goes into one log, ours included. Every line says whose it is. Nobody can change or remove a line.
Where your data is
In the customer's region; in Europe with Hetzner in Germany. An installation serves one region and knows only that region's data.
Isolation
Every customer has, per environment (Development, Test, Acceptance, Production), a walled-off space with a role of its own. Whoever does not belong there is refused by the database, not by a line of code.
Access
Who may come in is up to your company administrator. Signing in happens at one address, account.documinds.com, on a full page. Whoever approves a letter without an account gets a one-time link that expires after one verdict.
Support
Support access is off by default. Once you release it, it holds for one environment, with a reason and a ticket number, read only, and it closes by itself after eight hours at most.
Audit log
One log, in which you read what we read. Every line says whether it is ours or yours. A line cannot be changed or removed, not even by the owner of the database.
Retention
The retention term is set per letter, per template and per environment; the shortest wins. In Development and Test that is thirty days at most. Backups hold a copy for six months at most.
Testing
In Development and Test all post goes to one test mailbox. Test data taken from a real run expires by itself, and never comes from Production.
Connections
Keys to your systems are sealed with a master key that is kept outside the database. A connection logs only reference, duration and outcome.
Documents for your tender
We send them on request, with the name of the person who answers your questions.