What is GDPR (AVG)? Meaning and explanation

The GDPR has applied across the European Union since 25 May 2018. It sets requirements for every processing of personal data: there must be a legal basis, the purpose must be clear, no more data may be processed than necessary and the data must be adequately secured. Data subjects have rights, such as access and erasure. In the Netherlands, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) supervises compliance.

An accounting or bookkeeping firm works with personal data every day: of clients, their employees and their contacts. Using AI raises extra questions, such as where the data is processed, who can access it and whether it is used to train AI models. Firms must record agreements with suppliers in a data processing agreement and be able to show that access and security are in order.

Autoboeker encrypts data in transit (TLS) and at rest (AES-256), with role-based and administration-specific access and audit logs for actions in the system. Data is only used to provide the service, never sold or shared, not used to train public AI models and deleted when the account ends. A DPA is available, and sub-processors and security documentation are in the Trust Center.