Security and your data
Your data, kept in the EU and kept simple.
What we store, how it's protected, who can see it, and what we'd never do with it. ItemTally is made by Ethereal Labs AB in Göteborg, Sweden, and the register is hosted in the EU. The full list of who processes what is on the EU hosting and GDPR page.
What we store
Your items, quantities, folders, tags, custom fields, photos and documents, the people you lend to, the logbook, and your account. About a borrower we keep a name, and an e-mail address only if you add one. There's no advertising profile of anyone.
Where it lives
The register database runs on Hetzner in the EU. Photos, documents and signatures are in Cloudflare R2. E-mail, payments, error reports and AI features use named providers, some of them in the US. See every sub-processor.
How it's protected
-
In transit
Every request to the website, the app and the API is encrypted with TLS. Cloudflare sits in front of the API and absorbs attacks before they reach our server.
-
The database
PostgreSQL on a Hetzner server in the EU, with no public address. Only the ItemTally server talks to it, and every query is scoped to your workspace.
-
Sign-in
Passwords are stored as one-way hashes. The session cookie is HTTP-only, so scripts in the page can't read it. Workspaces can use single sign-on with any OpenID Connect provider.
-
Who can do what
Owners and admins edit, borrowers take and return, viewers look. A room key limits a member to their own folders. API keys are read-only unless an editor makes a write key, which acts as that editor and stops working if they stop being one.
-
A history you can't rewrite
The logbook is append-only. An item's quantity is the sum of its movements, so a wrong number can be traced to the line that caused it, and a correction is a new line.
-
Backups that restore
The database is backed up daily to off-site storage. A restore drill loads a backup into a scratch database, compares row counts and re-checks the logbook totals.
Sub-processors
Hetzner runs the servers and the database (EU). Cloudflare serves the site and app, fronts the API and stores files. Resend sends e-mail. Polar sells paid plans and uses Stripe for cards. Sentry receives error reports. Anthropic answers Ask ItemTally questions when someone uses them. What each one sees, and its country, is in the table on the EU page.
Yours to take, yours to delete
Download the whole workspace as a ZIP of CSV files on any plan, any day, with no ticket. The owner can close the workspace from settings: it stays recoverable for 30 days, then it's deleted. No hostage-taking, ever. It's in the pledge.
Why trust a small company?
Fair question. We don't have a SOC 2 report or an ISO certificate yet. What we have is a small, legible setup you can understand, every provider named, a real person accountable for it, and a public changelog. Trust the mechanisms, not the marketing.
Security questions
Where is ItemTally hosted?
The register database runs on Hetzner in the EU. The EU page lists every provider that handles your data, including the US companies we use for the network, e-mail, payments and file storage.
Do you have SOC 2 or ISO 27001?
Not yet. ItemTally is a small, founder-run company, and we'd rather say so than show a badge we haven't earned.
Who at ItemTally can see our data?
Alex, the founder, when you ask for help with something specific. Nobody else, and nobody browses customer registers.
Do you sell our data or use it to train AI?
No. We never sell it, advertise against it or train models on it. AI features only run when someone in your workspace uses them; the EU page says what they send and where.
How do we report a vulnerability?
E-mail [email protected]. A person reads it, usually Alex, and you'll get a real reply.
Found a problem? E-mail [email protected]. A human, usually me, reads it, and you'll get a real reply instead of a ticket number. Alex
Simple to understand. Easy to leave.
Free forever for one editor and ten borrowers. Export everything any day.
Free for one editor and ten borrowers, with unlimited items. No card needed.