Security
Security & GDPR for your firearms register and shooting club
Whether it's firearms data or member data: AmmoSuite Register and AmmoSuite Club are built to keep sensitive data well protected. 2FA available by default, a dedicated database per customer, and an audit trail that doesn't allow retroactive changes.
Technical security measures
Concrete measures that protect your data.
Two-factor authentication (2FA)
In both Register and Club, every account can enable 2FA via an authenticator app (TOTP, QR code) with recovery codes, so a leaked password alone isn't enough to get in.
Extra for Register: auditor access code
AmmoSuite Register additionally offers an optional temporary auditor access code (configurable validity) for read-only access to the whole environment. Every inspector login is recorded in the audit trail.
A database per customer
Every customer has a fully isolated database with its own database password (stored encrypted). Your data always sits in its own database, separate from other customers', in both Register and Club.
TLS, encrypted transport
All communication between your browser and AmmoSuite runs over TLS (HTTPS). The database is not publicly reachable and can only be accessed over an isolated private network.
Daily backups
Your database is backed up automatically every day. In case of an incident or error, we can restore an earlier recovery point.
Immutable audit trail
In Register, every change and deletion is permanently logged, and a logged entry can't be altered afterwards. In Club, the activity log tracks who did what.
Role-based access control
Every role only has access to what it needs: administrator and read-only auditor in Register, administrator, range officer and member in Club.
Hosting & data location
Your data stays within the European Union, in line with GDPR.
The application and databases are hosted within the European Union. No data transfer to third countries outside the EU without appropriate safeguards.
We process data in line with the General Data Protection Regulation, in both Register and Club. A Data Processing Addendum (DPA) is available for both products.
GDPR & Privacy
AmmoSuite processes personal data solely to deliver the service. No advertising profiling, no selling data to third parties. More details are available in our legal documents, including a Data Processing Addendum for both AmmoSuite Register and AmmoSuite Club.
Questions about security?
Get in touch, we're happy to answer your questions about technical security, GDPR or hosting.