Security
How Honodo protects your data
What Honodo does to protect your data – and what you can contribute yourself. How we process personal data is set out in the privacy policy.
Servers in Germany
The website, platform and database run on our own server, which we rent from Hetzner Online GmbH. It is located in the Falkenstein data centre (Saxony). There are no other hosting or database providers; data is not transferred to countries outside the EU.
Encrypted transmission
The website and platform can only be reached via HTTPS. Everything transmitted between your browser and Honodo – sign-in data, projects, quotes, invoices – is encrypted in transit.
Sign-in and accounts
- Passwords are not stored in plain text, only as a cryptographic hash.
- You can enable two-factor sign-in: in addition to the password, a one-time code from an authenticator app is then required.
- After a password change, existing sessions are ended.
- Repeated automated sign-in attempts are limited.
Separate firms, permissions per person
Each firm works in its own area, separated from other firms, and sees only its own data. Within your firm, you use roles to define who may view and edit quotes, invoices or settings. Permissions are checked on the server, not just in the user interface.
Your documents remain available
Quotes, fee proposals and invoices are available for download as PDFs at any time, e-invoices additionally in the structured format. Finalised invoices cannot be changed afterwards. After the end of the contract, your access remains in place for 30 days for exporting data (Terms § 9 (7)).
No tracking in the signed-in area
No analytics or advertising services run in the signed-in area of Honodo. Fonts and all program components come from our own server. Statistics and marketing services exist only on the website and the registration page, and only with your consent (see privacy policy).
What you can do yourself
- Enable two-factor sign-in for all accounts.
- Give each user only the permissions they need for their work.
- Do not share user accounts – each person gets their own account.
- Also keep issued invoices and e-invoices in your own archive where statutory retention obligations apply to you (Terms § 7 (3)).
Reporting a security issue
If you notice a possible security vulnerability, please write to us at info@honodo.de. We will respond as quickly as possible and treat your report confidentially.
More information: Privacy policy · Terms
As of 17 October 2026