Skip to content
Honodo
Log in
DE
EN
Start free trial
Start free trial

Security

How Honodo protects your data

What Honodo does to protect your data – and what you can contribute yourself. How we process personal data is set out in the privacy policy.

Servers in Germany

The website, platform and database run on our own server, which we rent from Hetzner Online GmbH. It is located in the Falkenstein data centre (Saxony). There are no other hosting or database providers; data is not transferred to countries outside the EU.

Encrypted transmission

The website and platform can only be reached via HTTPS. Everything transmitted between your browser and Honodo – sign-in data, projects, quotes, invoices – is encrypted in transit.

Sign-in and accounts

  • Passwords are not stored in plain text, only as a cryptographic hash.
  • You can enable two-factor sign-in: in addition to the password, a one-time code from an authenticator app is then required.
  • After a password change, existing sessions are ended.
  • Repeated automated sign-in attempts are limited.

Separate firms, permissions per person

Each firm works in its own area, separated from other firms, and sees only its own data. Within your firm, you use roles to define who may view and edit quotes, invoices or settings. Permissions are checked on the server, not just in the user interface.

Your documents remain available

Quotes, fee proposals and invoices are available for download as PDFs at any time, e-invoices additionally in the structured format. Finalised invoices cannot be changed afterwards. After the end of the contract, your access remains in place for 30 days for exporting data (Terms § 9 (7)).

No tracking in the signed-in area

No analytics or advertising services run in the signed-in area of Honodo. Fonts and all program components come from our own server. Statistics and marketing services exist only on the website and the registration page, and only with your consent (see privacy policy).

What you can do yourself

  • Enable two-factor sign-in for all accounts.
  • Give each user only the permissions they need for their work.
  • Do not share user accounts – each person gets their own account.
  • Also keep issued invoices and e-invoices in your own archive where statutory retention obligations apply to you (Terms § 7 (3)).

Reporting a security issue

If you notice a possible security vulnerability, please write to us at info@honodo.de. We will respond as quickly as possible and treat your report confidentially.

More information: Privacy policy · Terms

As of 17 October 2026