Security and data handling
Where the data runs, how we back it up, and exactly what we commit to contractually — described in verifiable technical terms rather than marketing language.
Where and how the data runs
| Data centres | EU cloud infrastructure (Frankfurt / Vienna region) |
|---|---|
| Data in transit | TLS 1.3 encryption on every connection |
| Data at rest | AES-256 encryption |
| Database | PostgreSQL 17 · streaming replication, primary plus hot standby replica |
| Separation | customer data is kept separated per tenant |
Backup and restore practice
| Frequency | daily full database backup · continuous transaction log (WAL) archiving |
|---|---|
| Retention | daily backups kept for 30 days |
| Geo-redundancy | backups are also stored in an EU member state other than Hungary |
Updates, monitoring, availability
- Automated monitoring and alerting on servers and applications
- Announced maintenance windows, at least 48 hours ahead, outside business hours
- Security patches applied without delay, with notification
The availability commitment (99.5% per year) and the response times for fault reports (critical: <4 hours, medium: <24 working hours, low: <5 working days) are contractual commitments set out in the Terms of Service.
GDPR and how responsibility is split
The system supports the handling of personal data with GDPR-aware technical and organisational measures. Full data-protection compliance also requires your company to set up its own processes and policies appropriately.
When you use SimpliTime or SimpliFleet, DVP Systems Kft. generally acts as a data processor for your employees' and drivers' data; you remain the data controller. The exact split of roles is set out in the Data Processing Agreement.
- Privacy notice — website and trial-registration data
- Data Processing Agreement (GDPR Article 28) — customer data
- Terms of Service — contractual terms and availability
If you find a security issue
If you find a security flaw or vulnerability in our systems, please report it to hello@dvp.systems. We investigate reports and get back to the reporter.
These systems support company administration and help you build processes in line with the applicable rules, but using them does not replace legal, employment-law, tax, accounting or payroll advice.