How we protect your data
Hetkin is in an active pilot phase. Here’s what’s actually true about how we handle your data today — we’d rather be precise than impressive.
Data isolation by organization
Every customer organization's data is scoped at the database level, so one organization's schedules, consumption data, and reports are never visible to another.
Encrypted in transit
All traffic to the Hetkin portal and website runs over HTTPS. Data is stored with our infrastructure providers' standard encryption at rest.
Auditable by design
Every recommendation, schedule decision, and admin action is written to a tamper-evident audit log, so a savings figure can always be traced back to how it was calculated.
Separate internal access
Hetkin staff use a completely separate login system from customer accounts, with shorter sessions and stronger password requirements, so a customer credential can never grant internal access.
How your data gets into Hetkin today
During the pilot, electricity consumption data is uploaded by your team as a file — we don’t yet have an automated, direct integration with meter data platforms such as Fingrid Datahub. That’s on our roadmap; when it ships, it’ll be opt-in and clearly explained here first.
Where we are on formal compliance
We build with GDPR principles in mind — data minimization, defined retention periods, and support for access and erasure requests (see our Privacy Policy). We don’t yet hold formal certifications such as SOC 2 or ISO 27001, and we haven’t completed a third-party security audit. As we move past the pilot stage, formal certification is something we plan to pursue — we’ll update this page when it happens rather than claim it early.
Alongside data protection, the rules that most directly govern this business are Finnish energy-market regulation and the contract terms defining how “verified savings” and revenue share are calculated and disputed. See our Terms of Service for the current documented basis, and our Methodology page for how a savings figure is calculated and reviewed before it’s billed.
Found a security issue? Please tell us at security@hetkin.app.