Where can I find the availability status of your products?
The availability status of our products can be found on https://status.exact.com.
Where can I find the certifications and attestations your products have?
The certifications that our products have can be found on this page.
Where can I find a list of your sub-processors?
An overview of the sub-processors which Exact may use to deliver (parts of) the Exact Services and process your Business Data as further described in the Privacy Policy can be found on this page.
What is Exact's privacy policy?
Exact’s Privacy Policy for Exact Services can be downloaded from this page in both Dutch and English.
How do I report a vulnerability I found in one of your products?
If you discovered a vulnerability in one of our products, we appreciate if you let us know so we can get it fixed as soon as possible. On this page you can find our instructions for how to report it and you could get added to our Hall of Fame.
Which data does Exact collect and for what purpose is it used?
You can find the information about the processing of personal data in the Privacy Policy for Exact Services (for customers) and the Privacy Statement and the Cookie Policy (for website visitors).
Where does Exact store my data?
Depending on the Exact Services you have requested, your Business Data may be stored on servers of our sub-processors, which are located in different datacenters. Depending on your Exact Services, these servers may be located outside of the EEA. The locations of our datacenters for storage purposes are shown in our Privacy Policy for Exact Services, which can be downloaded from this page in both Dutch and English.
How can I request compliance reports and attestations of your products?
These can be requested through the Support Portals of the products, that can be found on exact.com/support.
Is data stored on Exact cloud products encrypted?
Exact encrypts customer data in transit and at rest.
Does Exact share the results of performed penetration tests on products?
The results of penetration tests performed on Exact products are only shared with auditors as part of third party attestations (ISAE3402). For further inquiries contact security@exact.com.
Where can I find Exact's security and technology policies?
Exact’s security and technology policies are not shared externally.
Where can I reach out for questions about pentests and how can I report an incident?
For questions about pentests, reach out to customer success. To report an incident send an email to security@exact.com.
What is the RPO / RTO of the Premium editions of Exact Online
In the event of an incident resulting in a data center failure, the RPO (recovery point objective) for the Premium editions of Exact Online is 1 hour. The RTO (recovery time objective) depends on the circumstances at related (sub) services and will be determined and communicated (upon request) in case of any incident.
Where can I update my email preferences?
We are hosting an Exact product on our own environment. Can I receive the ISAE 3402 for this product?
The ISAE 3402 reports only cover the Exact products and services which are hosted by Exact (either SaaS or via Exact Cloud Services). No assurance can be derived from these reports for Exact products which are hosted by the customers themselves since we do not control or maintain these environments.
I need more detailed information on the security policies and security configurations of the product I use. Can I receive this information?
For security reasons it is not possible to share more detailed information on our security policies and controls than already shared in our ISAE 3402 reports.
Can Exact provide or restore backups at the customer's request?
Exact takes crucial steps to protect your data from unauthorized access, data breaches and other disruptive information security threats to business and consumer data. The details can be found in this Trust center. The steps also include the creation of backups of customer data for data recovery. These are used in case of disaster recovery. Exact cannot provide or restore these backups at the customer's request.