Security & compliance
Encryption, access control and EU data residency
Rowan Cargo runs on EU infrastructure with encryption, access control and audit logging built in, aligned with ISO 27001 practices and the Spanish ENS. Your data stays yours and you take it whenever you want.
How we protect your data
Security built into the platform
Encryption in transit and at rest
TLS on every connection and encrypted storage for your files and databases.
Roles & granular access
Every user sees only what their role allows, per office and per client — with two-factor authentication.
Backups & recovery
Automated backups with a defined recovery point, so a failure never means losing your operation.
Audit log
Who did what and when. Every relevant action is traceable for compliance and disputes.
Data in the EU
Hosted in Madrid, EU. No transfers to third countries, no surprises with data residency.
Continuous monitoring
Availability and security monitoring with alerting, plus dependency and patch management.
Compliance
Standards and regulations we work to
We're transparent about what's a certification and what's an alignment. Everything below is either a legal obligation we meet or a framework our practices follow.
Legal · AEATInvoicing with the chained hash and check QR the VeriFactu regulation requires, ready before 1 January 2027.
Processing agreement, data-subject rights and EU data residency.
Information-security practices modelled on the ISO 27001 controls — not a certification claim.
Aligned with the Esquema Nacional de Seguridad, relevant for public-sector buyers.
Data ownership
Your data is yours, and portable
Your data is yours
Annual contract, and you leave with your data whenever you want. Confidence, not a padlock.
Full export
Files, shipments and contacts exportable in standard formats on request.
You're the controller
You own your data; we're the processor and never sell or reuse it.
Data residency
Your data lives in Madrid, in the European Union
No transfers to third countries and no surprises. You own your data and you can take it with you whenever you want.
For buying committees
Everything a buying committee demands, on the table
Need our security questionnaire or DPA to move a deal forward? Ask and we send it the same day.
Book a demo- Data Processing Agreement (DPA) on request
- Data residency in the EU (Madrid)
- Role-based access with two-factor authentication
- Audit log of relevant actions
- Backup and recovery policy
- Named security contact and incident channel
Bring your security questions to a live demo
30 minutes on the real product. We'll walk your committee through it.
30-min demo · no commitment · your data in the EU (Madrid)