Data in the EU
Your business data is stored in the EU (Frankfurt).
Security & privacy
Your data, secure and in the EU.
And what we don't do is on the page too.
Mory is built for the service sector — with data protection as a starting point, not an afterthought.
Strictly separated per client
Every organisation has its own, isolated data space. No client can access another's data.
Encrypted in transit and on the phone
Connections run over TLS. The session on your employee's phone is stored encrypted, with the key in the device's secure storage — if someone loses their phone, there is nothing to read off it.
No tracking between shifts
Location is recorded only at clock-in and clock-out. The app does not ask for it in the background and cannot — that is off in the app itself, not a setting someone can flip.
Two-factor authentication
Enabled per account. The check sits where a session is read, not only at the login form — so a detour through a password reset doesn't get past it either.
Role-based access
Everyone sees only what they need. Access is arranged per role, from field worker to administrator.
GDPR & data processing agreement
Archived conversations are permanently deleted after 30 days — by a daily job, not once somebody gets round to asking. Every data type has its own retention window like this. A data processing agreement (DPA) is available on request.
Runs on Supabase and Vercel
Two providers serving thousands of companies, with the database in Frankfurt. We build the application; they run the infrastructure underneath it.
Questions about security?
Need a data processing agreement or have a question about how we handle data? We're happy to help.