Security

Your business data, protected and in the EU

You trust SAPUGO with your customers, orders, and finances. This is how we keep that data safe.

Your data stays in the EU

SAPUGO stores and processes workspace data in the EU. We are a European company, and the GDPR applies to everything we do.

Every workspace is kept apart

Each workspace gets its own isolated database with its own credentials. Your records are never stored alongside another customer's.

Access is checked on every request

Permissions are enforced by the server for every table, view, row, and field, whether a person, the AI assistant, or a connected app asks.

Nothing changes without a trace

Every change to every record is kept in the change log. Changes to tables, views, permissions, and settings appear in the audit log.

In detail

What protects your workspace

Hosted in the EU

Your data is stored and processed in the EU.

Isolated database

Every workspace gets its own isolated database with its own credentials.

Change log on every record

Every change is kept, so you can see who changed what and when.

Automatic backups

Backups are kept for up to 10 years, within your plan's backup storage and how many backups the plan can hold.

Two-factor sign-in

Protect accounts with two-factor authentication.

GDPR by design

A European company, EU hosting, and a clear privacy policy.

Encrypted in transit

All traffic between your browser and SAPUGO is encrypted with TLS.

AI that respects access

The AI assistant only sees what the person asking is allowed to see.

API access with the same permissions

Connected apps act as a member of your workspace, so the same permissions and change log apply.

FAQ

Security questions

More in our privacy policy, or write to hello@sapugo.com.

Where is my data hosted?

In the EU. Workspace data is stored and processed in EU data centers.

Who can see my data?

The members of your workspace, according to the permissions you set for each table, view, row, and field.

How long are backups kept?

Up to 10 years. Each plan also caps backup storage and how many backups are kept. When a new backup would pass either cap, the oldest backup is removed.

What can the AI assistant see?

Only what the person asking is allowed to see. The assistant works with the same permissions as the member using it.

Can I get a data processing agreement?

Write to hello@sapugo.com with your company details and we will get back to you.

How do I report a security issue?

Write to hello@sapugo.com. Please include the steps to reproduce it, and give us time to fix it before sharing it publicly.

Start with a description of your business

Tell SAPUGO how your company works. Your system is ready in minutes, and you can change everything later.

Free for up to 10 members · No credit card · Hosted in the EU