Security, Compliance & Reliability - HANNA CRM
Reliability you can trust

Reliability you can trust

Hanna is built with security, stability, and responsible data protection at its core.
Security is not an add-on — it’s part of how the system works from day one.

See prices
namai-mobile namai-mobile namai-mobile

Data security

Encryption

Encryption

  • Data is encrypted in transit (TLS 1.2 or higher)
  • All communication with servers is secured via HTTPS
  • Sensitive user data is encrypted at rest
  • Passwords are stored using one-way cryptographic hashing with salting and are not
  • accessible to Hanna employees
  • Infrastructure-level protection against unauthorized access
Access control

Access control

  • Role-based access control (RBAC)
  • Optional two-factor authentication (2FA)
  • All user and administrative actions are logged
  • Logged events include logins, data creation, edits, exports, and deletions
  • Full auditability and access history tracking
  • Audit logs are retained for no less than 12 months
Infrastructure

Infrastructure

  • Hosted in secure, high-standard data centers
  • Physical and network security controls
  • Isolated customer environments and data segregation
  • Continuous system monitoring
  • Customer data is stored within the European Union

These measures ensure data protection at both technical and organizational levels.

ISO 27001 Certification

ISO 27001 Certification

Hanna’s Information Security Management System is certified to ISO/IEC 27001:2022.

This means:

  • Systematic risk assessment and risk management
  • Documented security policies and procedures
  • Regular independent audits
  • Continuous improvement of security processes

Security assurance is an ongoing process, not a one-time effort.

Reliability is not an extra feature. It is the foundation of sustainable business growth.

System Monitoring & Availability

  • 24/7 automated system monitoring
  • Real-time alerts for disruptions
  • Incident escalation procedures
  • Historical monthly system availability exceeding 99.5%

We aim to maintain a minimum monthly uptime of 99.5%.

Critical alerts are immediately routed to the responsible team to ensure rapid response.

System status and uptime history are publicly available at: status.hannacrm.app

System Monitoring & Availability

Business Continuity

System stability is essential to business continuity.Hanna ensures:

  • Regular automated data backups
  • Backup storage across geographically separate locations
  • High-availability architecture with multiple active application instances using load
  • balancing
  • A documented Disaster Recovery (DR) plan
  • Incident management and recovery procedures

Recovery objectives:

  • RTO (Recovery Time Objective): up to 12 hours
  • RPO (Recovery Point Objective): up to 6 hours

In the event of disruption, the system can be restored within defined timeframes, and potential data loss is limited and controlled.

Our objective is to ensure uninterrupted business operations.

Business Continuity

Vulnerability Management

  • Regular security assessments of systems
  • Ongoing vulnerability monitoring and remediation processes
  • Critical security patches applied with priority

Security threats are continuously evaluated and mitigated in accordance with industry best practices.

Vulnerability Management

SaaS Architecture & Platform Accessibility

Hanna is delivered as a SaaS solution.

  • Each customer operates in a dedicated, isolated environment
  • Accessible via web browser
  • Mobile access supported
  • Secure API-based integrations available

The platform is designed for secure, reliable access from anywhere.

SaaS Architecture & Platform Accessibility

Integrations & API Security

Hanna provides a secure REST API, with communication conducted over encrypted HTTPS channels using standardized JSON format.

  • API communication secured via HTTPS
  • Authentication and access control enforced at API level
  • Secure integrations with third-party systems

The API enables controlled and secure data exchange between systems.

Integrations & API Security

Change Management

All system changes follow a documented change management process.

  • Code reviews prior to deployment
  • Testing and quality assurance procedures
  • Automated updates and security patches
  • Phased deployments to minimize operational risk
  • Customers are informed in advance of significant changes

This ensures system stability and controlled risk management.

Change Management

Incident Management

Customers are informed of significant security incidents without undue delay, in accordance with legal and contractual requirements.

Incidents are managed under a documented response procedure designed to ensure rapid resolution and impact mitigation.

Incident Management

Professional & Cyber Liability Insurance

Hanna maintains professional and cyber liability insurance.

  • Coverage limit: €1,000,000 per incident
  • Worldwide coverage
  • Insurer: Lloyd’s of London (A+ rating)
  • Covers professional errors, data breaches, and privacy violations

This provides an additional financial safeguard for our customers.

Professional & Cyber Liability Insurance

Privacy & GDPR Compliance

We respect and protect customer data.

  • Compliant with the EU General Data Protection Regulation (GDPR)
  • Data Processing Agreement (DPA) available
  • Transparent list of engaged subprocessors
  • Customer data remains the sole property of the Customer
  • Data export and deletion available upon request

Hanna does not sell or reuse customer data for purposes unrelated to service delivery.

Privacy & GDPR Compliance

Organizational Security Measures

Technology is only part of security. Processes and people matter equally.

  • Access granted on a strict need-to-know basis
  • Employees bound by confidentiality agreements (NDA)
  • Regular security training
  • Internal security policies and procedures
  • Defined incident escalation and response processes

Security is a continuous operational responsibility.

Organizational Security Measures

Transparency

We are committed to clarity and openness. Publicly available documents include:

Customers are notified in advance of material changes to the subprocessor list. If you have any questions regarding security or compliance, our team is ready to assist.

Transparency

Hanna is a valued partner. You should value her too!

Hanna is a professional and modern CRM assistant for your business. Her priorities are to streamline and digitize company processes, making work easier for each employee. Customer recommendations confirm this!
See prices
Hanna is a valued partner. You should value her too!