Data Protection and Data Recovery

Data Protection and Data Recovery

Data Protection

ApprovalMax processes personal data as both a Data Controller and Data Processor, as defined in the Directive and the General Data Protection Regulation (GDPR). We are a Data Controller with regard to the client information we process for our own purposes, and we are a Data Processor with regard to all information clients upload to our systems, platforms or software. 

You may request a Data Processing Agreement (DPA) to govern our processing relationship by contacting our Customer Success team. 

All your personal information is protected and we have put in place appropriate physical, electronic, and management procedures to safeguard and secure the data we collect. 


Data Recovery

All information you upload in our app is stored in a database in a secure data centre in Microsoft Azure. 

ApprovalMax utilises the built-in Microsoft Azure backup service and performs two types of backups:
  1.  Full backups of all customer data are done daily
  2.  Incremental backups are done every 10 minutes
Backups are stored using the built-in Microsoft Azure data storage.

The recovery of customer data is done using the built-in Microsoft Azure capabilities. In a disaster event, backed up data will be made available to users within 6-12 business hours.


For questions related to information security, please refer to our Security Portal.

    • Related Articles

    • Account protection

      2-factor authentication ApprovalMax provides a 2-factor authentication mechanism to protect users from account takeover attacks. Account takeover protection ApprovalMax protects our users against data breaches by monitoring and blocking brute force ...

    • Synchronisation of related Xero data

      ApprovalMax pulls related Xero data such as Contacts/Accounts/Themes etc. every 2 hours. To speed up this process, the Administrator of an Organisation can force the synchronisation manually. To do so, go to either the approval or requester matrix in ...

    • How often is data synced with Xero?

      Pulling new documents and pushing back approval decisions ApprovalMax pulls new Credit Notes/Purchase Orders every 1 hour during a day. However, due to Xero API limitations, it’s not possible to get them right after they’ve been created. For Bills ...

    • What Xero data does ApprovalMax modify?

      ApprovalMax works with Xero data in two modes: In write mode (with documents created in ApprovalMax and pushed to Xero as well as with Bills in the first approval step - if the feature Bill review and approval is set up). In read-only mode (with ...

    • Legal Basis for Processing Personal Data Under General Data Protection Regulation (GDPR)

      If you are from the European Economic Area (EEA), the ApprovalMax Limited legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we ...