Security
What protects your data and documents
This page describes what works on Batizzy today, with no promises for later. Each point matches a rule in the platform's code or in its database.
Your data
Hosted in the European Union
The database is in the European Union and the application runs in the Dublin region. Vercel, which hosts it, is an American company, and a few providers (email, artificial intelligence, notifications) are based outside the EU: the list and the safeguards are in the privacy policy.
Each account reads only what concerns it
Access rules live in the database itself (row level security): they apply even if a page forgot a check. An automated test rejects any table that a visitor or an account could modify without those rules.
Secrets are encrypted
The SMTP passwords, Peppyrus keys and Google Calendar access you entrust to Batizzy are encrypted (AES-256-GCM) before they are stored.
You can leave with your data
From your settings, you download your data as a JSON file and request the deletion of your account. The account is then anonymised within a month at the latest.
Your access
Repeated attempts are slowed down
Login, sign-up, codes sent by email and password resets are limited per IP address, and per email address after repeated failures.
Passwords nobody can read
They are handled by the authentication service (Supabase Auth), which only keeps them hashed: nobody at Batizzy can read them.
A blocked account is cut off
When moderation blocks an account, its sessions are closed, it can no longer log in and the database refuses its writes.
The site itself
HTTPS only
The site tells your browser to use HTTPS only, for two years (HSTS).
No third-party scripts
A content security policy (CSP) only allows Batizzy's own scripts, with a unique key on every page view. No advertising tracker or audience measurement tool is loaded.
Not shown inside other sites
Batizzy refuses to be displayed inside another page's frame, so nobody can trap a click with a fake button laid on top.
Public files under control
Each public storage space has a maximum file size and a list of allowed types, with no SVG or HTML, which can carry code. An invoice received through Peppol is displayed in a frame isolated from the rest of the site.
Your messages and documents
Messages that stay as sent
A sent message cannot be edited or deleted, and its time stamp comes from the server.
Frozen quote, recorded acceptance
Once sent, a quote no longer changes. On acceptance, Batizzy records the date, the method, a SHA-256 fingerprint of the accepted document, the version of the terms and a fingerprint of the IP address, never the address itself.
Protected sharing links
For the invoice and worksheet links sent to clients, the database only keeps a fingerprint: a copy of the database would not be enough to open them.
Notifications without outside links
A link in a Batizzy notification always leads to a Batizzy page.
Technical logs
Personal data masked in the logs
The server log masks the known personal fields: email, phone, name, address, message content, IBAN, IP address. Text messages are logged without the number or the content.
Frequently asked questions
Who can read my messages?
The participants in the conversation. For moderation and mediation, Batizzy's administrators can read them too: conversations are not end-to-end encrypted. A sent message cannot be edited or deleted.
Can Batizzy ask me for a payment?
Not for works: money for the works never goes through Batizzy, and a homeowner pays Batizzy nothing. Only pros who choose a subscription pay Batizzy, from their account. Any other payment request in Batizzy's name is a fraud attempt: report it.
What does the "CBE verified" badge guarantee?
That the pro's company number was recognised by VIES, the European Commission's service. It says nothing about the quality of the work or insurance: ask for a detailed written quote and read the reviews.
How do I delete my account?
From your settings. The request is recorded and the account is anonymised within a month at the latest. You can download your data first.
Report a flaw or abuse
A security flaw
Write to us with "Security" in the subject line and the steps to reproduce the problem. Give us time to fix it before you publish anything.
contact@batizzy.be
An abusive account or content
Use the "Report" button on the profile, message or project, or the report form, which works without an account.
The legal details
Who processes your data, why and for how long: it is all in the privacy policy.