Security and compliance
How notarity protects your data
How notarity protects your data: hosting in EU data centres, encryption end to end, strict access controls and electronic signatures in compliance with eIDAS.
- GDPR
- Electronic signatures in compliance with eIDAS
- Platform hosted in EU data centres
The measures
What notarity has in place
In enough detail to answer your own security checklist while you read.
Hosted in the EU
The notarity platform is hosted in data centres in the European Union, on ISO 27001-certified infrastructure. Where individual subcontractors process data outside the EU, they do so only in compliance with the GDPR's requirements for international data transfers.
Encryption
Documents and communication are encrypted in transit with TLS. All sensitive data is encrypted at rest with AES-256 or equivalent.
Who can see what
Access is role-based on the principle of least privilege, with multi-factor authentication for employees and users, single sign-on internally and periodic access reviews.
Identity and signing
Identity verification meets eIDAS assurance level high. Documents are signed electronically, in compliance with eIDAS. Only the notary can initiate signing, and every appointment is recorded in a tamper-proof protocol.
Monitoring and incident response
Systems are monitored in real time (SIEM) and protected by firewalls, intrusion detection and prevention, and endpoint protection; they are patched and scanned for vulnerabilities regularly. Every access to personal data is logged. Encrypted backups and tested disaster recovery plans keep data available, and a documented incident response plan includes a breach notification protocol in line with the GDPR.
Security is built into every appointment
Secure online notarisation starts with where your data lives. The notarity platform is hosted in EU data centres, in line with the GDPR, with encryption in transit and at rest, strict role-based access and electronic signatures in compliance with eIDAS. Systems are monitored in real time and patched regularly, so your legal team can have confidential documents notarised online with confidence.
Is online notarisation legally valid and secure?
Online notarisation is legally permitted in many countries worldwide. The notarisation is carried out by a licensed partner notary, and documents are signed electronically, in compliance with eIDAS. The platform is hosted in EU data centres on ISO 27001-certified infrastructure, data is encrypted in transit (TLS) and at rest (AES-256), and access is protected with multi-factor authentication and strict access controls. If you are unsure whether your document can be notarised online, contact our support team.
Where is my data stored?
The notarity platform is hosted in data centres in the European Union, on ISO 27001-certified infrastructure. Where individual subcontractors process data outside the EU, they do so only in compliance with the GDPR's requirements for international data transfers.
Who at notarity can access my data?
Only employees who need it for their role. Access is role-based, protected with multi-factor authentication, reviewed regularly and logged.
How is my data protected?
Data is encrypted in transit with TLS and at rest with AES-256. Access requires multi-factor authentication and is role-based, and all access to personal data is logged. Firewalls, intrusion detection, endpoint protection and real-time monitoring protect the systems, which are patched and scanned for vulnerabilities regularly. Encrypted backups and tested disaster recovery plans keep data available.
What happens in case of a security incident?
notarity has a documented incident response plan that sets out roles, responsibilities and procedures. In case of a data breach, affected individuals and the regulatory authorities are notified promptly, as required by the GDPR.
How long is my data kept?
Personal data is only kept for as long as necessary, in line with the GDPR. Details are in our privacy policy.
Clear notarity internally, without weeks of questionnaires
Book a demo to walk through the measures with our team, or send us your security questions.