Data security
Your data is our top priority. Discover the measures we take to keep it protected.
At Clynt, security isn’t an option — it’s the foundation of our platform. Every feature, from project management to invoicing, is designed with protecting your data as the number-one priority.
Hosting and infrastructure
Your data is hosted in the European Union (Germany), on certified infrastructure. The Clynt application runs on a Node.js architecture with a MongoDB database, deployed in ISO 27001-certified data centers. The data centers are physically protected around the clock, with biometric access control and permanent video surveillance. A few subprocessors, such as the email delivery service, may process some data outside the EU: these transfers are covered by the European Commission’s standard contractual clauses and listed in our privacy policy.
Data encryption
All communications between your browser and Clynt are protected by TLS 1.3 encryption. Your stored data — projects, invoices, contracts, client information — is encrypted at rest with the AES-256 algorithm, the same standard used by banks. Uploaded files (attachments, signatures) are encrypted too. No data ever travels in plain text.
Authentication and access control
Authentication relies on secure JWT tokens with automatic expiry and refresh tokens. Clynt’s role system (owner, manager, team, client, guest) lets you control precisely who can access what in your organization. The client portal gives your clients restricted, secure access without exposing your internal data. Suspicious login attempts are blocked automatically.
Backups and redundancy
Your MongoDB database is backed up automatically every day, with 30-day retention. The history of your invoices, quotes and contracts is kept immutable, in line with French legal requirements.
GDPR compliance
Clynt is fully compliant with the General Data Protection Regulation (GDPR). A Data Protection Officer (DPO) has been appointed. You have the right to access, rectify, erase (right to be forgotten), port and object to the processing of your personal data. Consent is collected explicitly and can be withdrawn at any time. Your data is never sold or shared with third parties for commercial purposes.
Secure payments
Payments are handled by Stripe, the global leader in online payments, certified PCI DSS Level 1 — the highest security certification in the payments industry. Clynt never stores your banking data (card number, CVV) on its servers. The bank details shown on your invoices are locked at the time of issue to guarantee their integrity.
Monitoring and incident management
Clynt’s infrastructure is monitored 24/7 by advanced monitoring systems. Automatic alerts enable a real-time response to any anomaly — intrusion attempts, load spikes, server errors. An incident response plan is in place, with documented procedures for notification, investigation and resolution. In the event of a security incident, affected users are informed within the timeframes set by regulations.
Recommended best practices
To strengthen the security of your Clynt account, we recommend: using a unique, complex password (at least 12 characters), never sharing your login details, regularly reviewing your team’s roles and access in your organization settings, logging out after each session on a shared computer, and immediately reporting any suspicious activity to our support team at contact@clynt.io.
Our commitments in numbers
Ready to simplify how you run your business?
Join the agencies and freelancers who use Clynt every day. Free trial, no commitment.