Technical and organizational measures
An overview of technical and organizational measures for website and platform, from TLS encryption and role concepts to backups and incident management.
Last reviewed: 2026-07-22
Technical and organizational measures
Technical and organizational measures (TOM) describe how Nexcal protects data. This overview summarizes the basics. The binding and detailed page is security.
Nexcal provides technical and organizational functions for controlled and privacy-oriented use. The customer remains responsible for configuring and running their campaigns lawfully.
Measures of this website
For the marketing website, the following measures can be verified, among others:
- encrypted transmission of content and form data via TLS;
- server-side validation of form inputs;
- abuse protection for forms without an external captcha service;
- management of credentials via environment variables;
- no analytics, tracking or advertising technologies;
- logs without conversation content.
Measures of the platform
For the Nexcal platform, measures are envisaged or in implementation, including:
- a graded roles and permissions concept;
- separation of the data of different workspaces;
- logging of security-relevant events;
- backup and restore procedures;
- processes for handling security incidents;
- review of service providers before they are used.
The specific status is documented before production use.
Hinweis: No certifications are claimed that do not exist. Statements such as "absolute data security" are deliberately avoided, as such a level of protection cannot be technically guaranteed.
Your role
Your configuration also contributes to protection. Assign roles sparingly, import only the fields you need and observe the retention rules. The role logic is described in roles and permissions.