Security and privacy posture

Plain language about where your data can go.

Actuala is self-hosted software. The supplied architecture does not require AWS, Google Cloud, Microsoft Azure, a payment processor, remote analytics or an object-storage service. The actual location and subprocessors depend on the operator’s deployment and provider choices.

What is encrypted

Connector credentials and raw payloads, external IDs, IBANs, transaction counterparties and notes, customer and supplier names, invoice identifiers, support content, audit details, user identity fields, and organization names use Rails Active Record Encryption.

What remains queryable

Dates, status values, tenant keys, categories, currency and financial amounts remain plaintext so dashboards can calculate totals and trends efficiently. Access is tenant scoped and this explicit trade-off is documented in the security guide.

Conditional European data flow

A Hamburg/European data-flow position requires the operator to follow the deployment guide and select suitable hosting, SMTP, DNS, monitoring, support, registry and backup providers. It is a deployment objective—not a software guarantee, legal promise or certification.

Your controls

• Role-based access and auditable sensitive actions
• Owner/admin complete tenant privacy archive
• Organization deletion and personal account deletion paths
• Minimal read-only connector architecture