What we protect
When you use our platform — whether as an EV driver, a business customer, or a charge point operator — we process personal data such as your name, contact details, payment information, and charging session data (station, time, energy used).
How we protect it
Your data is encrypted at rest using AES-256, and in transit using TLS 1.2 or higher.
We're ISO/IEC 27001:2022 certified, the international standard for information security management.
Access to your data is restricted through role-based access control — only people who need it for their role can see it.
We run regular independent security audits and penetration testing on our platform.
Where your data is stored
Your data is stored in Google Cloud's EU data centre in Frankfurt, Germany. Because Google Cloud is a US-headquartered provider, transfers of your data are still subject to EU rules on international data transfers — we address this using the EU Standard Contractual Clauses, as required under GDPR.
How long we keep it, and your rights
We only keep your data for as long as necessary, and retention periods vary depending on the type of data and why we hold it (for example, tax law requires us to keep certain financial records for longer). You can find the exact retention periods per data category, along with more on your rights (access, correction, deletion, objection, data portability, and the right to lodge a complaint with the Dutch Data Protection Authority), in our full Privacy Policy and Security overview.