--- title: "Security and data protection | FreeMe.bg" canonical: "https://freeme.bg/en/security" language: en --- Security # How we protect your data Your company’s books hold everything: bank, clients, salaries, personal data. They deserve more than a laptop with a backup “maybe”. Here is what we do, concretely and without marketing fog. ## Questions to ask any accountant Including us. Your company’s books pass through someone’s hands and someone’s computer. Here is what is worth knowing, and how we answer. ### Where do my company’s documents physically live? If the answer is “on the office computer”, their safety depends on one machine: whether it is locked, encrypted and up to date. **At FreeMe:** on Amazon Web Services, in the Ireland region (EU). Not on anyone’s laptop. [Details →](https://freeme.bg/en/security#sec-aws) ### Who can access them, and how do I know who opened them? When documents travel through email, chats and shared folders and access is not logged, nobody can tell you who saw what. **At FreeMe:** an accountant opens your company only with a one-time key, through a logged session capped at 2 hours. Every change is recorded under their name. [Details →](https://freeme.bg/en/security#sec-audit) ### What happens if the computer is stolen or breaks? A stolen laptop without disk encryption means your documents in someone else’s hands. A failed disk without a backup means lost books. **At FreeMe:** the database is backed up automatically every day, with point-in-time recovery, and documents are versioned. [Details →](https://freeme.bg/en/security#sec-backups) ### Does the computer that holds my books still get security updates? Windows 10 support ended on 14 October 2025. According to [Microsoft](https://support.microsoft.com/en-us/windows/windows-10-support-has-ended-on-october-14-2025-2ca8b313-1946-43d3-b55c-2b95b107f281), a PC without security updates is at greater risk from viruses and malware. **At FreeMe:** your books do not live on anyone’s computer. The connection to the app is encrypted, and so are the database and your documents at rest. [Details →](https://freeme.bg/en/security#sec-encryption) ### If I switch accountants, do I get everything? The data belongs to your company. You should be able to take it without depending on anyone’s goodwill. **At FreeMe:** you see everything at any time, and if you leave, you get a complete archive of your accounting. [Details →](https://freeme.bg/en/security#sec-data) ### Isn’t it riskier to keep many companies’ data in one place? A fair question. One place means a breach would affect more people. That is why the protection has to be stronger, not weaker. **At FreeMe:** every request is checked to make sure it belongs to your company, we keep no passwords that could leak, and our processes are built on ISO/IEC 27001. Certification is under way. [Details →](https://freeme.bg/en/security#sec-iso) ## The infrastructure ### Amazon Web Services, EU The app, the database and your documents run on Amazon Web Services in the Ireland region (EU): infrastructure with physical security, redundant power and network protection that no accounting office could afford. ### Encrypted everywhere All traffic to app.freeme.bg goes over an encrypted connection (HTTPS/TLS). The database and the document storage are encrypted at rest as well, so the data cannot be read even with physical access to the disks. ### Passwordless sign-in We keep no passwords of our own that could leak or be guessed. You sign in with your Google account or with a code sent to your email, and the session expires automatically after a period of inactivity. ### An audit trail for everything Every change to your books is recorded: who, when and what. Every request to the server is checked to make sure it really belongs to your company, so no customer ever sees another’s data. ### Daily backups The database is backed up automatically every day, with point-in-time recovery. Documents are versioned, so an accidental deletion or overwrite loses nothing. Accounting records are kept for as many years as the law requires. ### ISO 27001: certification in progress We build our policies and processes on the international information-security standard ISO/IEC 27001, and our certification is in progress. We will update this page when the certificate is issued. ### What our accountants can and cannot do Our accountants work inside your company to keep its books. Their access is narrow, temporary and traceable: - They have no account of their own in the app and cannot log in “from the side” - They open your company only from our internal console, with a one-time key valid for 60 seconds - Every such session is logged and expires automatically after 2 hours - Every change they make is recorded under their name in the audit trail ### Your data is yours - You see everything at any time, without asking anyone - If you leave, you get a complete archive of your accounting - Documents read by AI are not used to train models - Card payments, once available, will go through Stripe and your card details will not reach us - We never sell your data or share it for anyone else’s marketing The details are in our [privacy policy](https://freeme.bg/en/privacy). Honestly ### ISO 27001: where we are ISO/IEC 27001 is the international standard for managing information security. Our processes are already built on it: access control, audit trail, backups, supplier and incident management. Certification by an independent auditor is under way. We will not write “certified” until we are. Found a vulnerability or have a security question? Write to us at [hello@freeme.bg](mailto:hello@freeme.bg). ## More questions about security ### Are you ISO 27001 certified? Not yet. We build our policies and processes on the ISO/IEC 27001 standard, and certification by an independent auditor is under way. We will not write “certified” until we are, and we will update this page when the certificate is issued. ### How do I sign in without a password? With your Google account or a code sent to your email. FreeMe.bg keeps no passwords of its own that could leak or be guessed, and the session expires automatically after a period of inactivity. So keep the Google account or mailbox you sign in with secure. ### Do you use my documents to train AI? No. The documents the AI reads, and your data in general, are not used to train models. The AI only reads uploaded documents and suggests entries, and an accountant checks them. The model providers are listed among the sub-processors in the Data Processing Agreement. ### Can your accountants open my company whenever they like? Not freely: only through a logged, time-limited session. They have no account of their own in the app, they open your company only from our internal console with a one-time key valid for 60 seconds, and the session expires automatically after 2 hours. Every change they make is recorded under their name. ### Can other customers see my data? No. Every request to the server is checked to make sure it really belongs to your company, so no customer ever sees another's data. On top of that, every change to your books is recorded: who, when and what. ### Does FreeMe.bg comply with GDPR? Yes, GDPR has been built in from day one. When you enter personal data of employees, customers or suppliers, you are the controller and we process it on your behalf under the Data Processing Agreement, which is part of the Terms. We never sell your data or share it for anyone else's marketing. ## Peace of mind for your data. Freedom for you. Create your profile with a Google account, no minimum commitment. Once we have verified the company and the power of attorney, we activate the service. [Get started](https://app.freeme.bg/)