Visiodocs is a SaaS solution (Software as a Service). All data is stored in the cloud, where part of the data processing is done. The main part of the processing is done locally at the end-user computer. The cloud part of Visiodocs is based on Google Firebase, which handles the user authentication and authorization, runs the database and provides secure storage. Google complies with all important standards like ISO 27001. The use of Google Firebase ensures that all data is encrypted during transit and storage. If you upload documents to Visiodocs, which are not in PDF format, these are automatically converted to PDF using the api2pdf. This service currently runs on Amazon Web services in the United States, but will later in 2021 move to Google Cloud Platform. Api2pdf does not save any data on their platform and all data between servers are encrypted.
Google firebase privacy and security
You can read the details about Google Firebase Privacy and Security here.
In-depth security information
To keep customer data safe, Visiodocs employs extensive security measures to minimize access:
- Visiodocs restricts access to select employees, who have a business purpose to access data
- Visiodocs only permits access to persona data by employees who sign-in with Google Sign-in and 2-factor authentication.
Back-up and data retention
The entire Visiodocs database is backed-up daily and the data is kept for 7 days before they are deleted. All projects and user data that has changed are also backed-up daily. The users can restore their backed-up data from within Visiodocs if needed. These back-ups are automatically deleted after 30 days. When a user deletes a project, back-up data is by default kept for 30 days unless the user selects the "Delete all back-ups" option in which case all data is deleted immediately and cannot be recovered. Visiodocs has an option to delete all of the user´s data and back-ups immediately. After doing this data cannot be restored.
Storage of personal information
The only personal information stored by Visiodocs is the login user email address, the user name as provided by the user and the country and continent, where the user was located, when the user account was created.
Use of Firebase storage and data locations
Authentication is done using Firebase Authentication. This builds on Google authentication and all processing and data stored is in the United States.
Cloud Firestore is the Google database, which is used to store all Visiodocs data. Visiodocs is set-up to use a database located in a Google data center physically located in the EU.
Cloud storage for Firebase is used to store all documents uploaded to Visiodocs and to store back-ups. When a user signs-up to Visiodocs the continent the user signs-up from is registered and used to determine the servers used to store the user documents.
Sign-up continent and server location
Europe & Africa. Server is located within EU (multiple regions)
North & South America. Server is located in the United States (multiple regions)
Asia & Oceania. Server is located in Asia (multiple regions)
Cloud functions for Firebase
A limited amount of processing is needed at the backend and for that we use cloud functions for Firebase. The processing is done at the location, where the documents are stored (see Cloud Storage for Firebase).
Firebase Realtime Database
Firebase Realtime Database is used for administrative information, but contains no personal information. Firebase Realtime Database is located within EU.
We use Google Analytics to collect usage statistics, but we do not collect any personal information.