Software for the trades processes customer data, prices, times and photos from other people's houses. That is why GoBD, data protection and an audit log are in the core – not as an add-on module and not behind a surcharge. Hosting in Germany, sign-in without a password, AI with approval.
Sign-in by magic link. The link is valid for 15 minutes and only once. There is no password that is passed on at the site or hangs on the workshop wall. Sessions run through an httpOnly cookie, not through tokens in the address bar.
Roles in the business: owner, office, field and subcontractor. Whoever should only see their own day sees their own day; the subcontractor sees their jobs, but no prices, no amounts and no payment book.
Quotes and invoices get a continuous number. The archive does not change silently. Cancellation and credit note are separate documents. With the e-invoice, the XML is the original and the PDF is the reading copy.
For the tax audit there is a GoBD export (IDEA) at the push of a button, plus the log of all important actions with time, account and job.
AI writes into the same fields as a person in the office. Every action can be audited. Where money flows or the customer sees something, a person approves. AI requests run through Sollmaß accounts, primarily at IONOS in a data centre in Germany, otherwise at OpenAI, Google or xAI (see DPA). Prompts with customer data do not belong in telemetry.
GPS time only as an option and only with a clear basis in the business, including co-determination. Company inbox instead of the technician's private phone. Offline queue with a conflict rule: the field wins on documentation, the office on prices.
The data is stored on Hetzner servers in Falkenstein/Vogtland. This means we rely on an established German hosting provider and a data centre infrastructure certified to ISO/IEC 27001:2022. No US SaaS as the system of record. Where we buy hosting, there is a data processing agreement.
Backups run daily and are kept for 14 days, plus disk backups by Hetzner over 7 days. What happens when the contract ends — export, shutdown, retention and deletion — is set out in the DPA, as are the limits, openly: the database and files are stored unencrypted on the server.
The public site sets no trackers, no Google Analytics, no advertising cookies. That is why no consent banner appears; under “Cookie settings” in the footer you can still see at any time what is loaded. The website is delivered via Cloudflare, without tracking. Details in the privacy policy.