SECURITY · INFRASTRUCTURE

Built on AWS, designed for compliance.

We manage the infrastructure so you don't have to. Every aspect of security is handled, monitored and documented.

● STACKAWS EU-CENTRAL-1TLS 1.3AES-256GDPRSOC2 READYMULTI-AZWORM AUDITDPA

Six layers

Security, in six layers.
Managed by us. Documented for you.

AWS · MULTI-AZ

Hosting & Availability

AWS in a European region (Frankfurt). Multi-AZ deployment with automatic failover. Autoscaling absorbs traffic peaks with no manual intervention.

99.95%UPTIME SLA

TLS 1.3 · AES-256

Encryption

Data encrypted in transit (TLS 1.3) and at rest (AES-256). Keys managed by AWS KMS with automatic annual rotation.

256-bitAES ON EVERY VOLUME

30-DAY RETENTION

Backup & Recovery

Automated daily snapshots, 30-day retention. Point-in-time recovery in minutes. Geographically redundant backups.

<5minTYPICAL RPO

SCHEMA-PER-TENANT

Multi-tenant Isolation

Each company gets a dedicated schema on Aurora. No data mixing at the database level. Logical and physical separation.

0DATA LEAKS · EVER

FULL TRACEABILITY

Audit Trail

Every action recorded in an immutable log: user, timestamp, previous value. Available on request, exportable via API.

100%ACTIONS TRACKED

GDPR + SOC2 READY

GDPR & Compliance

GDPR by design. Data in the EU, portability, right to erasure. On the SOC2 Type II path. DPA available on request.

EUDATA RESIDENCY

Audit trail · live

Every action,
written in stone.

An immutable log for every operation: who, when, what, previous value. Exportable to CSV or via API, ready for internal audits and inspections.

10y

E-INVOICE RETENTION

WORM

WRITE-ONCE READ-MANY

● audit.nodeon.it/v1/eventsSTREAMING

14:23:41ORDER.update · #2026-0241marco.r@bertini.it

14:22:08INVOICE.create · #FE-2026-0089giulia.s@trattoria-mario.it

14:21:55BACKUP.snapshot · rds-eu-1-pri-09a8system

14:21:30DDT.emit · #DDT-2026-0142luca.v@officina-verdi.it

14:20:12USER.permission · role=managerfrancesca.p@centro-servizi.it

14:18:47TLS.cert.rotate · *.nodeon.itsystem

14:18:02PRICE.update · SKU-9821 · €12.50→€13.00marco.r@bertini.it

HASH-CHAINED · TAMPER-EVIDENTSHA-256: a9f2…b7e1

sample data

Compliance · standards

Recognized standards.
Documented, not just claimed.

GDPR

Compliant by design

Data in the EU, portability, right to erasure

DPA

Data Processing Agreement

Ready to sign, on request

SOC2

Type II · in progress

Audit started, completion Q4 2026

ISO

27001 · roadmap

Planned for H1 2027

● GDPR · COMPLIANCE

Need the DPA?

We send it within 24 hours, ready to sign. If your company needs specific documents for internal audits, we assess case by case — no runaround.

Request DPA

Security, in six layers.Managed by us. Documented for you.