Security & trust

Your business data, safe by design

Flinko is a Swiss-made platform for real companies. Here is exactly how we host, protect and isolate your data.

Hosted in Europe

The app and database run in EU data centres (Frankfurt) on Supabase and Vercel — no data leaves the region.

Encrypted in transit

Every connection is HTTPS/TLS with HSTS enforced. Passwords are hashed; we never see them in the clear.

Strict tenant isolation

Each company's data is separated at the database level with Row-Level-Security. Your team only ever sees your own company.

Sign-in you control

Email + password with server-side sessions. Roles decide who can see money, team and settings.

Managed backups

The database runs on managed Postgres with automated backups, so your records are recoverable.

Swiss & EU privacy law

We work to the Swiss nDSG and, where it applies, the GDPR. No selling of data, no ad tracking, only technically necessary cookies.

Who processes data for us

We use a short, carefully chosen list of subprocessors, each bound to process data only on our instructions:

Supabase (database & auth) · Vercel (hosting) · Stripe (payments) · Anthropic (AI assistant) · Resend (system e-mail).

Read the full privacy policy

Found a security issue?

We take reports seriously and answer fast. Write to us and we'll get on it:

info@flinko.ch

Built to be trusted

Start free, load sample data in one click, and see how it handles your own numbers.