Security at sakto

Effective: 21 October 2026. The German version is the authoritative one.

sakto turns trial balances into financial statements and databooks for M&A transactions. Your clients' numbers are confidential, so this page sets out how we protect them. The detailed security overview and our answers to standard security questionnaires are available on request, under NDA if you wish.

Where your data lives

  • The files you upload and everything derived from them (statements, mappings, scenarios, databooks) are hosted in Germany, in the European Union. Connecting an AI assistant is optional; what a connected assistant reads follows its provider's terms. Service e-mails such as sign-in links go out through Lettermint, an EU provider based in the Netherlands, and carry no financial data; the full list of what leaves our server is in the security questionnaire.
  • We run the service on infrastructure we operate ourselves, with a German hosting provider.
  • sakto is operated from Austria and works under the GDPR.

Each customer is kept apart

  • Every customer's data is separated in the application and again in the database itself, so a single mistake is not enough to expose one customer's data to another.
  • Requests for another customer's records are answered as if those records did not exist.
  • Automated tests try to read every part of the service as a second customer on every release. A release that fails them cannot go live.

Encryption and backups

  • All traffic is encrypted in transit (HTTPS only).
  • Uploaded files and delivered reports are encrypted at rest, with a separate key for each mandate. The analysis data in our database, such as scenarios, adjustments and names, is protected by the access controls of the database and the server and is deleted with its mandate.
  • Deleting a mandate destroys its key in the live service; copies in our backups remain until the backups expire, in normal operation at most 21 days later.
  • Backups are made daily, encrypted before they are written and kept at a separate site. Restoring from them is tested regularly.

Sign-in and access

  • Sign-in uses one-time email links instead of passwords. You can add a code from an authenticator app as a second factor. The team's owner can require it of every member: a member without it can then only set it up, and nobody in the team can turn theirs off.
  • An access log records who opened a mandate's statements, exported or downloaded its files, or read it through an AI assistant, and when. Everyone in the team that holds the mandate can view it and download it as CSV.
  • A security log for the team's owner records sign-ins, changes to the second factor, to the team's members and to AI-assistant access, and when anyone signed out on all their other devices. The owner can download it as CSV.
  • You can sign out on all your other devices at once; this also ends every AI assistant's access.
  • AI assistants are off for a new team. Only the team's owner can turn them on or off, for the whole team.
  • If you connect an AI assistant, it works only through access you grant and can revoke at any time, and it sees only your team's data.

Privacy by design

  • No analytics, tracking, advertising or third-party scripts on sakto.ai.
  • Your data is never used to train AI models.
  • In a quick analysis, the file itself is not stored on our servers. The figures read from it are kept in the server's memory for up to 5 minutes after their last use, for your account only, so that an edit need not send the file again; they are never written to disk or to the database. What you type in its tabs is saved to your account, keyed to a fingerprint of the file, and deleted 90 days after the last change or with your account.

GDPR and contracts

  • You remain the controller of the data you upload. sakto processes it on your behalf under a data processing agreement (Art. 28 GDPR).
  • We use as few subprocessors as possible and list every one of them; the current list is part of the data processing agreement and is available on request. New subprocessors are announced in advance.
  • If a personal data breach affects your data, we notify you within 48 hours, so you can meet your own duties.
  • You can export and delete your data yourself at any time. More in our privacy policy.

Contact

For the full security overview, a completed security questionnaire or an NDA, write to hello@sakto.ai.