Security and privacy
Your ensemble’s data, protected by design.
Organisations and musicians trust Weikos with personal, employment and financial information. Protecting it is part of the product: every new feature decides, from its design, who can see and change each piece of data.
Data stays in the European Union
The database and files are stored on Amazon Web Services servers in Frankfurt (Germany). The providers involved, with their data processing agreements, are listed in the privacy policy.
Encryption in transit and at rest
All communications are encrypted with TLS, and the database and files with AES-256.
The most sensitive data, encrypted field by field
On top of that, the ID document, Social Security number, date of birth, address, bank accounts and tax ID are each encrypted individually.
Everyone sees what’s theirs
Access is role-based: each person sees and changes only what corresponds to their role and their relationship with the organisation. Roles can be adapted to each organisation.
Audit log
Weikos records who creates, changes, exports or deletes information, so the organisation can review it.
Backups
Automatic database backups with point-in-time recovery, and file versioning to undo an accidental deletion.
GDPR and data protection
The organisation is the controller of its team’s data and Weikos is its processor. The processing clauses required by the GDPR are part of the contract with each organisation and, if an organisation needs a separate data processing agreement, we sign it. We only work with providers that offer sufficient guarantees, also under contract.
Privacy policy →Working towards ISO 27001 and the ENS
We are implementing an information security management system in line with ISO/IEC 27001 and Spain’s National Security Framework (ENS), with the aim of certifying it in 2027. We review our measures every time the product changes.
Security policy →Found a security issue?
Write to us at security@weikos.io with what you found and how to reproduce it. We’ll reply as soon as possible and keep you updated on the fix. And remember: we will never ask you for passwords, codes or bank details by email.