Privacy, Security & Compliance

For us, compliance is not an addition, but an integral part of our work. We comply with legal requirements, protect your data and ensure that all processes are transparent and comprehensible. Our processes and systems are designed to meet the highest requirements.
Dokumente mit einem Sicherheitsschloß

Certified compliance

GDPR-compliant

We comply with the current EU regulations. Personal data is properly recorded, stored and documented.

cayan lifting

ISO 27001-certified

ISO 27001 is the international standard for Information Security Management Systems (ISMS) and defines the requirements for the implementation, operation, documentation and optimisation of an ISMS.

Cayan lifting

DORA-compliant

We fulfil the requirements of the EU regulation on digital operational resilience (DORA). This ensures that financial organisations and their service providers implement measures to protect against IT risks.

BaFin-compliant

Caya fulfils the regulatory requirements of the German Federal Financial Supervisory Authority (BaFin) and is used by many banks.

Caya Trust Centre

Find out more about our compliance measures, certifications and security standards. You can find lots of information about compliance with Caya in our Trust Centre.

Pfeil der nach rechts zeigt

Privacy & data security

How we protect your data: legally, physically and digitally.

Order processing contract

If you use Caya, you can conclude an order processing contract (AVV) in accordance with Art. 28 GDPR.

End-to-end and SSL encryption

Thanks to end-to-end and SSL encryption, your data is protected throughout transmission.

Grafik von Cayan der Ordner lagert
Hosting & storage in Germany

Your documents are stored in a highly secure server center in the Frankfurt banking environment.

Highly automated scanning process

Your mail is digitized using a highly standardized and automated process.

Highest safety standards

Maximum security through video surveillance, electronic access controls and security service.

Your data belongs to you

Under no circumstances will we share your data with third parties without your consent.

Post scan service

Audit-proof & GoBD-compliant

  • Automated and audit-proof storage
  • Compliance with GoBD, HGB & AO
  • Documents are provided with a digital receipt stamp
  • Loss of documents due to digital processing ruled out

Collaborate securely

Access security & role management

Determine who can view or edit which documents — with a flexible and secure role and authorization system.

All documents securely in one place

Centralize your digital document management in a secure environment and access it securely at any time.

Client and location capacity

Manage multiple companies, departments, or locations in one system — with separate data areas and individual access settings.

Do you have any questions about compliance?

Our team is happy to help you. Please use the following contact form.

x icon

Thank you very much for your interest!

We'll get back to you as soon as possible.
Something went wrong while submitting the form. Please try again