Skip to content
You're offline
Pages won't load until you're back. Anything you send will wait.
We can't reach fam.
Your connection looks fine from here, so this is likely on our side.
Log in

Security

On the record.

Where your data is stored, how it is protected and who can access it. The answers buyers usually ask us for, in one place.

Where your data lives

AWS eu-central-1 · Frankfurt

fam. runs in the European Union. The database, file storage, cache and outgoing email all stay in Frankfurt, and that region is fixed in our infrastructure code.

Encryption

TLS in transit · encrypted at rest

Every connection to fam. is encrypted with TLS. The database, the cache and every backup are encrypted at rest.

Backups

Daily · kept 7 days · restore tested every quarter

We back up the database automatically every day and test a full restore every quarter. Files keep their previous versions for 30 days, so we can recover one that was deleted or overwritten. The production database is also protected against accidental deletion.

Status

Live status page · public incident history

We post every incident and planned maintenance at fam.instatus.com. Subscribe there to be told when something goes wrong and when it is fixed.

Signing in

12+ characters · leaked-password check · two-factor

Passwords follow NIST 800-63B: at least 12 characters, checked against lists of leaked passwords, and stored only as a hash. Admins can require two-factor sign-in, by app, email or text message, for everyone in their organization.

Who changed what

Every console change recorded · kept 1 year

Every change made in your organization's console, every export and every sign-in by fam. support is recorded with who did it and when. We keep this record for a year.

Support access

Any time, or only when you allow it

Your admins decide whether fam. support can open your organization at any time, or only after they allow it, for 72 hours at a time. Every time we sign in, your admins will see it in the organization settings.

Your data stays yours

CSV export · deleted within 90 days of leaving

You can export your data yourself, from inside the app. When you leave, we delete your organization's records and files within 90 days, or sooner if you ask, and anonymize its people.

What we do not do

No tracking · no ads · no resale

There are no third-party analytics scripts or advertising pixels on this site or in the product, and we never sell your data.

Who else processes your data

  • Amazon Web ServicesHosting, storage, emailEU · Frankfurt
  • StripePayments and billingCard data stays with Stripe
  • AnthropicAI assistantOnly the questions people ask it
  • SentryError monitoringError details, not your content
  • Google Cloud TranslationTranslating names and labelsOnly the text being translated
  • MapTilerMaps and address searchSearched addresses, no account data

That is the complete list.

Reviewing us as a supplier?

Send us your security questionnaire. The people who build fam. will answer it personally.

Send your questionnaire

fam. Technologies · KVK 77432525 · Utrecht, NL · Privacy · Terms · DPA on request
Found a vulnerability? Email security@fam.services. Reviewed · October 2026