Frequently asked questions
How are data protection and data security handled in cleaning software?
Data protection and security in cleaning software depend on three factors: (1) hosting location (ideally in the EU / Germany for GDPR compliance), (2) encryption of data in transit and at rest, (3) role-based access control with audit trail. LiteLog hosts in Frankfurt, Germany, encrypts all data transfers (TLS) and at rest, and offers role-based access — so only authorised personnel see personal data of cleaning staff and client information.
Where is our data stored?
Database and backups at Platform.sh in Frankfurt am Main, photos and files in Amazon S3 in Frankfurt. Push, SMS and maps partly use US services under standard contractual clauses. The list is in annex 2 of the data processing agreement.
Which hosts and ports must be open in the firewall?
Outbound port 443 to portal.litelog.de and api.litelog.de and to Amazon S3 in Frankfurt. For push also Google FCM on ports 5228 to 5230 and Apple APNs on port 5223, for maps api.mapbox.com. No inbound rules are needed.
Does LiteLog support Microsoft Entra ID?
Yes, via OpenID Connect with PKCE for portal and app. Every plan includes sign-in, allowed domains and signing out blocked accounts. From Premium you also get "Microsoft sign-in only", automatic account creation, your own app registration and roles from your Entra app roles: employee, site manager, sub-admin or subcontractor. Assignment via groups requires Entra ID P1. Your IT grants admin consent to the LiteLog app once and assigns users or groups to the app roles. There is no SAML or SCIM.
What happens when someone leaves the company?
Block the account in Microsoft. LiteLog checks with Microsoft at least once a day and signs blocked accounts out within 24 hours, in portal and app. From Premium, LiteLog syncs with your directory every 6 hours and deactivates blocked or deleted accounts. Accounts the sync blocked are reactivated when unblocked.
Is there two-factor authentication?
Yes, with an authenticator app, ten recovery codes and trusted devices for 30 days. It can be enforced company-wide with a deadline. Sign-in by NFC tag or QR code and time tracking at the station do not require a second factor.
What password rules apply?
At least 8 characters, stored as bcrypt hashes. After ten failed attempts an account is locked for 15 minutes.
How long does a session stay valid?
In the portal the access token expires after 20 minutes and is renewed for up to one day. The app stays signed in; you set the automatic sign-out per device between 5 minutes and 24 hours. With Microsoft sign-in, LiteLog checks at least once a day whether the account is still active there.
Can we distribute the app via MDM or Intune?
Yes, as a store app through any MDM. There is no app-specific configuration. The app does not support conditional access with device binding. We recommend enforcing device encryption via MDM.
Is data on the smartphone encrypted?
Access tokens and user data yes, with the key in the keychain or keystore. The offline database for patrols relies on device encryption. If a device is lost, lock the account in the portal and the token becomes invalid.
How are backups made?
Every day at 03:00 the database is dumped and transferred AES-256-encrypted to the object store in Frankfurt. Retention 30 days. Targets: at most 24 hours of data loss, restart within 4 hours.
What availability do you guarantee?
99.9 % as an annual average, calculated per calendar month, with service credits if missed. The hosting platform commits to 99.99 % at the infrastructure level.
Is there an audit trail?
Yes. Changes to times, patrols, accounts and settings are logged with person and timestamp, for times and patrols with a mandatory reason. Settings, templates, schedules and roles are recorded per field with old and new value. Reports are immutable once sent, and a four-eyes approval can be switched on.
Which certificates and audit reports exist?
The hosting platform is certified to SOC 2 Type II and PCI DSS. LiteLog itself holds no certification of its own and has no published penetration test report. We answer your IT questionnaires in writing.
Does LiteLog use AI with our data?
Only if you switch it on; it is off by default. It then runs on Azure OpenAI in the EU without training on your data, speech transcription via Deepgram in the EU.
What happens at the end of the contract?
Export or deletion at your choice, no later than 30 days after the end. Backups expire within 30 days. On an ongoing basis you export via CSV, PDF/A and the REST API.
Which operating models are there, and how often is LiteLog updated?
Three. On the main platform you share the infrastructure with other tenants. Updates come 2 to 3 times a month, each with release notes, at the lowest operating effort. On a dedicated server hosted by LiteLog, updates are bundled into agreed windows and checked on an acceptance environment beforehand; you set the date and get the platform feature level after your approval. On your own servers we hand over a frozen version. Updates then only come when needed, for example security fixes; larger version jumps run as a project because installation and testing take place on your side. Dedicated server and operation on your own servers on request.