Skip to content

Security

Trust, down to the foundations.

Information to help you assess Praxedia: how data protection is designed, which providers are involved and where to find service documents. Contact us for details of a product’s configuration.

Data location

The Praxedia platform uses Google Cloud infrastructure in European Union regions for product databases and storage. The applicable configuration and providers are described in the individual service’s documentation.

This corporate website is hosted by Vercel. Aggregate statistics, when enabled, use Plausible Analytics. The website notices describe this processing separately from that of the products.

Security measures

Data protection is part of the platform’s shared foundations. These are the main technical measures underpinning the products.

Per-customer isolation
Tables containing business data have a customer identifier and PostgreSQL row-level security policies. The database enforces this control alongside application permissions.
Roles and permissions
APIs declare the permissions they require. The platform checks authorization and validates the permissions of services and industry packs.
Connection and storage protection
The managed infrastructure provides TLS-protected connections and encryption at rest for storage services. Product documentation details the applicable configuration.
Activity traceability
The platform includes event recording and audit logs. IureSync’s time ledger stores corrections as new entries, without overwriting earlier ones.
Identity and access
The platform supports integration with Microsoft and Google identities. Available options and user management are described for each product.
Document management
IureSync can use a firm’s Microsoft 365 or Google Workspace environment for documents. In these configurations, files remain in the environment governed by the firm.

Providers and subprocessors

These are the common providers identified for the platform and this website. Check the list applicable to each product in its processing agreement and annexes.

ProviderPurposeLocationScope
Google CloudContracting entity: Google Cloud EMEA Limited (Ireland)Application hosting, managed database, object storage, backupsEuropean Union — European regionsClimaSync, IureSync
VercelContracting entity: Vercel Inc. (United States)Hosting of this corporate website. It does not process product customer data.Static content served from a CDN; no personal-data storepraxedia.com
Plausible AnalyticsContracting entity: Plausible Insights OÜ (Estonia)Aggregate traffic statistics for this website. No cookies, no persistent identifier, no profiling.European Unionpraxedia.com

The applicable processing agreement governs the engagement and replacement of subprocessors.

Product-specific providers may include additional services. Request the current list with the SaaS documentation.

Processing agreement and documents

For data entered into the products, the customer is the controller and Praxedia acts as processor. The processing agreement governs instructions, measures, providers and data handling in the customer relationship.

Contact us to receive the documentation applicable to your product or discuss a vendor questionnaire.

Art. 28 agreement — reference draft

The available file is a placeholder draft, not a document for signature. The applicable version must be supplied with the contract.

Availability and support

Availability, support arrangements and response times depend on the product and applicable contract. The product websites describe the commercial offering.

Contact us to assess operational requirements, maintenance and service terms before signing.

Report a vulnerability

If you identify a potential security issue, email the address below with “Security” in the subject line. Describe the affected product, the problem and steps to reproduce it, without including personal data or credentials.

  • Use only accounts and data you are authorized to access.
  • Avoid activities that could interrupt or degrade the service.
  • If you encounter personal data, stop testing and report the issue.
  • Coordinate public communication of the issue with us.
info@praxedia.com

Privacy roles and company identity

Praxedia S.r.l. is the controller for this corporate website. For business data in the products, the customer is controller and Praxedia acts as processor under the applicable agreement.

The Privacy and Cookie notices explain website processing and the analytics choice. Company particulars appear below and in the Legal Notice.

Legal identity

Registered name
Praxedia S.r.l.
Registered office
Via Comelico 18, 20135 Milano (MI) — Italia
VAT number (Partita IVA)
IT14762580968
Tax code (Codice fiscale)
14762580968
Companies Register (Registro Imprese)
Milano Monza Brianza Lodi — n. 14762580968
REA number
MI-2805508
Share capital
€ 10.000,00 subscribed, of which paid up € 2.500,00
Liquidation status
Not in liquidation
Certified email (PEC)
praxedia.srl@pec.it