Security at TAPR
This page lists only the measures we have in place today. We add a measure here once it is in place and we have checked it.
Last reviewed: 2026-10-04
Finland
EEA hosting (Hetzner)
TLS 1.3
Encryption in transit
ISO 27001
Certification underway
Swiss
Operated by Grynn GmbH
Certifications & Compliance
We are working toward internationally recognized information security standards.
ISO
ISO 27001
Underway
ISO 27001 certification is underway. We are building and aligning our information security management system to the international standard.
What we have in place
Each statement below has been checked against our systems.
Hosting
- The TAPR application (cloud.tapr.ch) is hosted by Hetzner in Helsinki, Finland, within the EEA.
- Our hosting provider, Hetzner, is certified to ISO/IEC 27001.
Encryption
- All connections to the application use TLS 1.3. Older TLS versions are refused and plain HTTP is redirected to HTTPS.
- Passwords and stored credentials, such as ERP and API keys, are kept encrypted in the database.
Access control
- Role-based access control, with access restricted per legal entity.
AI processing
- Free plan: no AI processing.
- Starter plan: AI extraction runs only with your own AI provider key, under your own agreement with that provider.
- Growth and Enterprise plans: AI extraction uses Anthropic (USA) as our sub-processor, under Anthropic's data processing agreement with Standard Contractual Clauses and a Swiss addendum.
Compliance
- ISO/IEC 27001 certification is underway. Our risk register and Statement of Applicability are in place.
- Website analytics are cookieless and processed in the EU.
Have Security Questions?
Email us your security questions and we will answer them.