With ioumi, you handle your customers' contracts and payments. That's why it needs to be on the table where this data is stored, who can access it and what applies legally. ioumi is an Austrian company, the platform runs in data centers in the European Union, and you remain the contracting party for your customers in every contract.
Hosting in the EU: Platform, contracts and backups are stored in data centers in the European Union. E-signature under eIDAS: Our own signature with a complete audit trail, not a third party service. Data processing agreement: Concluded with every seller, including an annex on the security measures. Not a reseller: Payments go to your own payment account, not through an ioumi account. The platform is operated in data centers in the European Union. Contracts, payment data and backups never leave the EU. Database and application are backed up automatically every night, and documents and files are additionally copied to separate storage twice a day.
At the hosting level, the data centers are ISO 27001 certified. These certificates belong to the data center operator, not to ioumi. We state this so clearly because many providers are vague at this point.
Every transfer runs over TLS version 1.2 or higher. Documents and files are stored in non public storage and can only be accessed via signed, time limited links. We never store passwords in plain text.
Each seller's data is separated from everyone else's, and internally we use role based access: nobody on the team sees more than their task requires. Every change to the platform is reviewed and tested before release, and availability is monitored around the clock.
The e-signature is part of ioumi, not a third party service. Every step is logged without gaps: when the contract was opened, read and signed, plus IP address, timestamp and device information.
It's based on the EU's eIDAS Regulation, which gives electronic signatures their legal effect. In a dispute, it's exactly this audit trail that counts.
ioumi is not a reseller. You remain the seller and the contracting party for your customers, and payments go to your own payment account, not through an account of ours. We don't hold any customer funds.
Card data is processed by a certified payment service provider and is not stored on our servers. The practical difference for you: you can switch away from ioumi without losing your payment relationship.
We conclude a data processing agreement with every seller. The technical and organizational measures are attached to the agreement as an annex, and you can get the list of subprocessors we use on request.
We answer questions about data protection, data subject rights or the deletion of data at datenschutz@ioumi.com. The competent supervisory authority is the Austrian Data Protection Authority in Vienna. You'll find all the details in the privacy policy.
Go to the privacy policyIf you notice something that looks like a security vulnerability, write to us at datenschutz@ioumi.com. We'll confirm receipt and get back to you with an assessment. Please only share findings publicly once they've been fixed.
Bring them to the demo call. We'll show you the audit trail of a signature, explain the data processing agreement and answer everything your data protection officer wants to know.
Yes. Austrian company, hosting in the EU, eIDAS compliant e-signature and a data processing agreement with every customer. Read the full answer
Yes, 100%. ioumi is not a reseller: contracts and invoices are issued in your name, and the customer relationship belongs to you. Read the full answer
Yes, the e-signature complies with the eIDAS Regulation (EU) No 910/2014, with a complete audit trail (IP, timestamp, document version). Read the full answer
Your payments keep running: due collections and invoices are scheduled in the background and processed afterwards. Hosting is in the EU with UpCloud, which states 99.999% availability. Read the full answer