Information security & data protection

Discover Ninox: Your compliant, certified and state of the art software solution for maximum data security and data protection.

Man looks into a computer and is pleased about data protection at Ninox

Certified quality and safety

Ninox meets the strict requirements of the General Data Protection Regulation. You can find further information in our Privacy statement.

Quality management is the basis of our processes and daily work. Ninox is certified according to ISO 9001 and therefore meets international standards.

Information security is firmly anchored in our organization. Our certification according to ISO 27001 It also shows how important risk management is for us.

Server hosting in professional data centers

Ninox Private Cloud relies on our Data center partner Hetzner.

Ninox servers are located in Germany and are located in ISO 27001 certified data centers, which ensure maximum data security. 

Protection against denial-of-service attacks

Firewalls with dynamic packet filtering

Optional hosting with AWS at international data center locations.

A room full of servers, similar to those located at our partner data center, where they guarantee data protection

Data encryption at the highest level

Our data transport is encrypted with TLS: Communication between the web browser or the Ninox app and the server is secure.

We work with data-at-rest encryption: Backups are stored in encrypted form at separate data center locations.

Passwords are stored 'salted' and 'hashed' in accordance with OWASP recommendations so that they cannot be decrypted and read.

Backups and disaster recovery: Complete protection of your data

application level

Ninox creates automatic backups during use, which users can restore independently at any time. In addition, Ninox customers can create and download manual backups.

filesystem

We regularly generate incremental backups of the file systems and secure them in encrypted form at separate locations. On this basis, we ensure Ninox's disaster recovery capabilities.

VM snapshots

Regular snapshots of the VMs provide another layer of security. On this basis, services can be quickly restored even in the event of serious technical problems.

A button that can be used to activate the disaster recovery plan

Ninox Private Cloud can be configured with customer-specific password policies: complexity, reuse, lifetime, session timeouts can be set freely.

Customers on the Enterprise plan also benefit from single sign-on options. Ninox also supports SAML and OAuth standards as well as the Active Directory service.

In the Enterprise plan, Ninox enables multi-factor authentication by integrating the customer's identity providers or connecting Okta.

Optimized authorization: access rights as required

Role-based authorization concept

Define your own user roles in detail to best suit your organization and process. You control who can create, delete, read, modify, and more records.

Fine-grained rights control

Access rights within the solution can be linked to roles at table and field level. You can even define access rights to individual records using roles and logical functions.

Settings in Ninox with which you can create role rights

Heading

Targeted measures and continuous improvements are central to our strategy to meet compliance standards and position ourselves as an information security innovator.

Information security & data protection

Certified quality and safety

Server hosting in professional data centers

Data encryption at the highest level

Backups and disaster recovery: Complete protection of your data

application level

filesystem

VM snapshots

Optimized authorization: access rights as required

Role-based authorization concept

Fine-grained rights control

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Heading

Your data is important to us. That is why we are constantly improving.

Bauen Sie genau das, was Sie brauchen - nicht mehr und nicht weniger