Trust & security
Built to handle your customers' data
Every installation involves personal data: a homeowner's name and address, photos of their electrical cabinet, and often an invoice. Done handles that data under GDPR, with access scoped per partner and per role.
How the platform protects your data
The controls in the product, and in the infrastructure underneath it.
GDPR-compliant processing
Done is a Swedish company based in Stockholm, and personal data is processed in line with GDPR.
Serverless on Google Cloud
The platform runs on managed serverless services in Google Cloud Platform, so patching and scaling of the underlying infrastructure are handled by Google.
Role-scoped access
Each retailer sees only its own data. Inside Backoffice, roles decide who sees what.
API tokens per partner
Each partner gets its own Partner API tokens, so an integration can only reach its own orders and data.
Encrypted in transit
All traffic between the apps, the browser, and the platform is encrypted.
Audit trails
Job and financial events are logged, so what happened, when, and by whom can be traced afterwards.
Verified flows
Approval before money moves
Extra costs, tax deductions, and installer payouts each need an approval or a verified check first.
- In Sweden, green-tech deduction checks against Skatteverket are verified with BankID
- Extra work can only be invoiced after the customer approves the quote in the app
- Installer payouts are self-billed only after the installation report is approved
For your vendor review
What procurement and IT teams usually ask for, and what we provide.
- A data processing agreement (DPA) for customers
- Security questionnaires completed on request
- A controlled process for account deletion and GDPR requests from end customers, installers, and business users
Responsible disclosure
If you find a vulnerability, email us with enough detail to reproduce it. We confirm that we received your report and keep you updated until it is fixed.
Report to malin@done.greenQuestions about security or data protection?
Request our DPA, send us your security questionnaire, or set up a walkthrough with your security team.
Contact sales