ZepDesk accounting software
Home / Data locations and backups

Where your data lives, and how you get it back out.

The application, database, receipts and daily backups are hosted by Hetzner Online GmbH in Falkenstein. Who else processes anything, where and when, is shown in the map below, with the same recipients as the privacy policy. The data processing agreement is signed in your account.

Secure early access Security in detail

Who processes your data where

Each box is a recipient with location and purpose. The dark box is where everything lives; the others only receive what their purpose requires.

Falkenstein (Vogtland), Germany
Hetzner Online GmbH
Application, databases, files and receipts, daily backups
always
Paris, France
Scaleway SAS
Receipt recognition and dictation
by default
Dresden, Germany
ALL-INKL.COM, Neue Medien Münnich
Sending e-mail
always
Munich, Germany
finAPI GmbH
Bank connection under PSD2
when you connect an account
Amsterdam, Netherlands
Mollie B.V.
Payment of the subscription
always
depends on the provider, USA for Anthropic
provider of your choice
AI assistant with a provider of your choice, for example Anthropic
if you choose it
Recipients, locations and purposes as in the privacy policy, version 1.4.0. Recipients for individual purposes, such as protecting the login, address suggestions while you type, checking VAT IDs or integrations you switch on yourself, are named in the policy itself. The dashed box only applies if you choose or connect an AI provider. The website itself and its analytics are hosted in Helsinki, Finland.

What our hosting covers

Data centers in Germany

Hetzner Online GmbH in Falkenstein, with data centers certified to ISO 27001. Each company runs as its own instance with its own database.

Encrypted connections

Every connection to ZepDesk uses TLS, with certificates from Let’s Encrypt that renew themselves.

Updates without maintenance windows

New versions arrive continuously, without you installing anything. Incidents are posted on the system status page.

What the status page measures and what it does not is explained under system status.

Availability and recovery.

99.5%
annual uptime, guaranteed in the contract
daily
backup of every instance, database and files
on request
restore by our operations team
DE
backups in the object storage in Falkenstein

We announce maintenance in advance on the status page and by email. If the guaranteed availability is not met, a pro-rated credit is available on request.

How you get your data back out

The company's administration creates the full export in ZepDesk itself, in the background and as one package. It contains what a business needs for its archive or a switch:

ContentForm
Receipts and outgoing invoicesas a list and as the original file
Quotes and remindersas the original file
Bank transactions, VAT returns, BWAas a list
DATEV batchfor your tax firm or the next software
Change logwho changed what and when
Real recording from ZepDesk: the DATEV export for your tax firm.

After the contract ends, ZeptronIT provides an export for 30 days under section 8 (3) of the terms; after that the data is deleted unless a statutory retention obligation applies. Keeping your books under section 147 AO is your obligation; the full export gives you everything for it in one package.

For a tax audit there is also the data carrier under section 147 (6) AO, security and GoBD.

Questions about operations

All questions and answers
Can I host ZepDesk myself?

No. ZepDesk is designed as a managed cloud, so updates, backups, and security stay with us. Running it on your own infrastructure is not something we offer at the moment.

What happens during an outage?

Outages and maintenance are posted on the system status page with time and impact; maintenance is also announced by email.

How do I get my data?

With the complete export under Administration, Company: receipts and invoices as a list and as original files, bank transactions, advance returns, BWA, DATEV batches for your tax firm and the change log. Customers, items and accounts you download per list as CSV. After cancellation you have 30 days for this.

What ZepDesk does not take on

No restore at the push of a button. Our operations team restores a backup on request, not you yourself.
No retention beyond the terms. What has not been exported after the 30 days is no longer available to you.
No access log for you. If our operations team accesses your instance during an incident, you cannot see this yourself in a log today; information is available at datenschutz@zepdesk.de, as section 7a.4 of the privacy policy states.

Start in Germany.

Create an account, sign the data processing agreement (AVV) in your account, get going. No setup fee.