Security
Trust, down to the foundations.
Information to help you assess Praxedia: how data protection is designed, which providers are involved and where to find service documents. Contact us for details of a product’s configuration.
Data location
The Praxedia platform uses Google Cloud infrastructure in European Union regions for product databases and storage. The applicable configuration and providers are described in the individual service’s documentation.
This corporate website is hosted by Vercel. Aggregate statistics, when enabled, use Plausible Analytics. The website notices describe this processing separately from that of the products.
Security measures
Data protection is part of the platform’s shared foundations. These are the main technical measures underpinning the products.
- Per-customer isolation
- Tables containing business data have a customer identifier and PostgreSQL row-level security policies. The database enforces this control alongside application permissions.
- Roles and permissions
- APIs declare the permissions they require. The platform checks authorization and validates the permissions of services and industry packs.
- Connection and storage protection
- The managed infrastructure provides TLS-protected connections and encryption at rest for storage services. Product documentation details the applicable configuration.
- Activity traceability
- The platform includes event recording and audit logs. IureSync’s time ledger stores corrections as new entries, without overwriting earlier ones.
- Identity and access
- The platform supports integration with Microsoft and Google identities. Available options and user management are described for each product.
- Document management
- IureSync can use a firm’s Microsoft 365 or Google Workspace environment for documents. In these configurations, files remain in the environment governed by the firm.
Providers and subprocessors
These are the common providers identified for the platform and this website. Check the list applicable to each product in its processing agreement and annexes.
| Provider | Purpose | Location | Scope |
|---|---|---|---|
| Google CloudContracting entity: Google Cloud EMEA Limited (Ireland) | Application hosting, managed database, object storage, backups | European Union — European regions | ClimaSync, IureSync |
| VercelContracting entity: Vercel Inc. (United States) | Hosting of this corporate website. It does not process product customer data. | Static content served from a CDN; no personal-data store | praxedia.com |
| Plausible AnalyticsContracting entity: Plausible Insights OÜ (Estonia) | Aggregate traffic statistics for this website. No cookies, no persistent identifier, no profiling. | European Union | praxedia.com |
The applicable processing agreement governs the engagement and replacement of subprocessors.
Product-specific providers may include additional services. Request the current list with the SaaS documentation.
Processing agreement and documents
For data entered into the products, the customer is the controller and Praxedia acts as processor. The processing agreement governs instructions, measures, providers and data handling in the customer relationship.
Contact us to receive the documentation applicable to your product or discuss a vendor questionnaire.
Art. 28 agreement — reference draftThe available file is a placeholder draft, not a document for signature. The applicable version must be supplied with the contract.
Availability and support
Availability, support arrangements and response times depend on the product and applicable contract. The product websites describe the commercial offering.
Contact us to assess operational requirements, maintenance and service terms before signing.
Report a vulnerability
If you identify a potential security issue, email the address below with “Security” in the subject line. Describe the affected product, the problem and steps to reproduce it, without including personal data or credentials.
- Use only accounts and data you are authorized to access.
- Avoid activities that could interrupt or degrade the service.
- If you encounter personal data, stop testing and report the issue.
- Coordinate public communication of the issue with us.
Privacy roles and company identity
Praxedia S.r.l. is the controller for this corporate website. For business data in the products, the customer is controller and Praxedia acts as processor under the applicable agreement.
The Privacy and Cookie notices explain website processing and the analytics choice. Company particulars appear below and in the Legal Notice.
Legal identity
- Registered name
- Praxedia S.r.l.
- Registered office
- Via Comelico 18, 20135 Milano (MI) — Italia
- VAT number (Partita IVA)
- IT14762580968
- Tax code (Codice fiscale)
- 14762580968
- Companies Register (Registro Imprese)
- Milano Monza Brianza Lodi — n. 14762580968
- REA number
- MI-2805508
- Share capital
- € 10.000,00 subscribed, of which paid up € 2.500,00
- Liquidation status
- Not in liquidation
- Certified email (PEC)
- praxedia.srl@pec.it
- info@praxedia.com