Your company's data is your company's.
You decide who gets access to your company's data, and when information is shared. The system makes it possible. You decide.
You are in control.
You decide who gets access to your company's data, and what role they have. The board, your accountant, investors or the bank see only what is relevant to them, not automatically everything.
You can change or remove an access at any time. Sharing always happens because you granted it, never automatically to anyone outside the company.
How we protect the data.
Nobody at Capassa sees your accounts
In Capassa – Your Digital CFO it is the algorithms that do the work on your company's data, not our employees. The key required to access customer data is held in a dedicated Key Vault in Microsoft Azure. Only one person at Capassa has that access today, and everything that happens in the vault is logged.
Hosting and storage
Capassa runs on Microsoft Azure, in data centres in Norway and Western Europe. Data is encrypted both in transit and at rest.
Role-based access
Each user only gets access to what is relevant to their role. A board member, for example, sees something different from an external adviser.
Identity verification with BankID
Automatic onboarding to Capassa requires BankID. Your role in Brønnøysundregisteret, the Norwegian register of business enterprises, determines the access: only the chief executive or the chair of the board can onboard a company, since they are the ones who can sign on the company's behalf. If someone without a Norwegian BankID needs access, that is approved separately by the chief executive or the chair of the board. Access to the Data room also requires BankID.
Signing in with SSO in Capassa Insight
Capassa Insight supports SSO. Insight does not require BankID for use, unlike automatic onboarding to Capassa and access to the Data room.
Certifications
Capassa currently holds no formal security certifications, such as ISO 27001.
Privacy.
We process personal data in line with the GDPR, as data controller for the data collected through our platform and our website.
Read the full privacy policyCapassa and Insight.
Capassa – Your Digital CFO works on the company's own data. Insight additionally works on publicly available information about companies, combined with information the company itself enters or gives access to. If Insight asks a company for ongoing accounting data, that always happens with the company's own consent.
Frequently asked questions
Who owns the data?
You do. Your company's data belongs to the company, not to Capassa. If you end your subscription, all data specific to your company is deleted.
Where is the data stored?
With Microsoft Azure, in data centres in Norway and Western Europe. Data is encrypted both in transit and at rest.
Can Capassa see our accounts?
No. In Capassa – Your Digital CFO it is the algorithms that do the work on your data, not our employees. The key required to access customer data is held in a dedicated Key Vault in Azure. Only one person at Capassa has that access today, and everything that happens in the vault is logged.
How does sharing with the board, the bank or investors work?
You decide who gets access and what role they have. Invite the board, the bank, investors or your accountant in with exactly the access they need, and remove it again whenever you want to.
What happens if we end our subscription?
All data specific to your company is deleted.
How is a new company onboarded to Capassa?
Automatic onboarding happens with BankID. Your role in Brønnøysundregisteret, the Norwegian register of business enterprises, determines the access: only the chief executive or the chair of the board can onboard a company. If someone without a Norwegian BankID needs access, that is approved separately by the chief executive or the chair of the board.
What information does Insight use about companies?
Publicly available information, combined with what the company itself enters or gives access to. If Insight asks a company for ongoing accounting data, that always happens with the company's own consent.
Is it possible to sign in with SSO?
Yes, in Capassa Insight. Insight does not require BankID for use, unlike automatic onboarding to Capassa and access to the Data room, which both require BankID.
Does Capassa hold security certifications, such as ISO 27001?
Not at present.
Do you have further questions about security?
Get in touch