Do I need to sign a separate DPA?

No. The DPA is Section 6 of the Terms of Service, which you accept during signup. It covers all GDPR Article 28 requirements: roles, processing purposes, retention, breach notification, subprocessor list, and audit rights.

Where exactly is data stored?

Database and application servers are hosted at Hetzner in Germany. No data is transferred outside the EU/EEA. Redis (session/queue) is co-located in the same data center.

What encryption is used?

AES-256-GCM with per-field initialization vectors. Phone numbers, emails, customer notes, employee tokens, and billing details are all encrypted before writing to the database.

Can a customer request their data be deleted?

Yes. The erasure workflow nulls all personal fields, retains the record shell for aggregate statistics, adds the phone to the opt-out list, and logs the action. It takes one click and is irreversible.

Do you use any US-based subprocessors?

Stripe (payments) and Resend (transactional email) process limited data. Neither has access to appointment data or customer phone numbers. Full subprocessor list is in the DPA.

Scisso

— Privacy by architecture

GDPR that'sengineered in.Not checked off.

Most booking apps claim GDPR compliance with a cookie banner and a vague privacy policy. Scisso encrypts every piece of personal data, hosts exclusively in the EU, and embeds a real Data Processing Agreement into the terms you sign at signup.

Start free trial

30-day free trialEU-only hostingEmbedded DPA

🔐

PII encryption

Names, phone, notes · AES-256-GCM

active

💬

SMS auto-deleted

Content deleted immediately after delivery

active

🌍

EU hosting

European cloud operator

📄

DPA in the Terms

Controller: you. Processor: Scisso.

signed

How we built it

Four layers of real protection.

AES-256-GCM

Encrypted at rest

Phone numbers, emails, notes, billing details. All personal data is AES-256-GCM encrypted before it hits the database. Even with full database access, the data is unreadable without the encryption key.

Hetzner DE

EU-only infrastructure

Servers in Germany (Hetzner). Database in EU. No data leaves the European Economic Area. No US subprocessors with access to personal data.

Art. 28 GDPR

Real DPA, not a link

The Data Processing Agreement is Section 6 of the Terms of Service. You accept it at signup. It defines roles (you: controller, Scisso: processor), retention periods, breach notification timelines, and subprocessor list.

Art. 17

Erasure that works

One click deletes all personal data from a customer record. Phone number added to the opt-out list. Record shell retained for statistics integrity. Audit log entry created. Irreversible.

Under the hood

The specifics matter.

SMS content deleted after delivery

The body of every SMS is nulled from our database immediately after the Android relay confirms delivery. We never retain message content.

Audit logging for every access

Every time personal data is read, modified, exported, or deleted, an audit log entry is written. The log itself contains only IDs and action types. Never personal data.

Role-based access control

Employees only see customers they have a relationship with. Receptionists see all customers in the organization. Nobody sees data from other organizations. Ever.

Opt-out enforcement at two layers

SMS opt-out is checked when the job is queued AND when the message is about to be sent. Double enforcement prevents edge cases where a customer opts out between queuing and delivery.

No tracking, no profiling

We don't build customer profiles. We don't sell data. We don't track behavior across organizations. Your client data belongs to you.

Data export on demand

Export all customer data in a standard format. Portable. Yours to take if you leave. No data hostage situations.

The difference

Compliance vs. architecture.

Scisso

Other apps

Personal data storage

AES-256-GCM encrypted at rest

Plaintext in database

Hosting location

EU only (Germany)

US or mixed, varies

DPA

Embedded in Terms, accepted at signup

Separate PDF, often unsigned

Customer erasure

One-click, immediate, audited

Email support, days/weeks

SMS content retention

Deleted immediately after delivery

Retained indefinitely

Audit trail

Every access logged automatically

None or manual