SECURITY
Kanpla runs menus, orders, allergens and payments across 4,500+ locations in Europe. That means we hold data about the people who eat there: their names, their allergies, their card details. We look after it the way we’d want ours looked after.
Audited by people who don’t work here.
Audit reports and certificates are available via our Trust Center.
European regions
Not replicated outside Europe
TLS 1.2 or higher
In transit, everywhere
Managed keys
At rest, rotated automatically
EUROPEAN REGIONS
We contract with Google’s European entity. Any access from outside the EEA is covered by the Standard Contractual Clauses in Google’s Cloud Data Processing Agreement, with the EU–US Data Privacy Framework as an additional safeguard.
A CLEAN EXIT
When a contract ends, we hand you a full export in a machine-readable format and delete it from production within our documented retention window.
Allergens are health data.
We treat them that way.
Cafeterias serve real people with real dietary needs, including children. So we built extra protection around the sensitive parts.
Special category data by default
Allergens, dietary requirements and uploaded medical notes are treated as Article 9 special category health data under GDPR, behind tighter access boundaries.
Guardian and school control
Children’s accounts are set up by the school or by a parent or guardian, who keeps control of the profile, dietary settings and order history.
Health data is securely shared
Allergen profiles are visible to the individual, their guardian and the authorized kitchen and health & safety staff. Medical evidence sits in isolated storage.
Your data never trains a model
No AI vendor may train models on customer data, prompts or user activity. No exceptions.
Personal data doesn’t go to translation engines
Translation runs on separate text streams, personal identifiers stripped out first.
Support AI stays inside support
Intercom Fin answers service questions inside our existing support boundaries.
YOU STAY IN CONTROL
Your identity provider.
Your retention rules. Your data.
Security shouldn’t mean asking us for permission. Most of what matters is in your hands.
Single sign-on
Connect Microsoft Entra ID over OpenID Connect. Your password policy, your MFA rules, your offboarding. Kanpla currently doesn’t offer SAML or other means of (de-)provisioning.
Central administration, local flexibility
Set permissions, product ranges, allowances, prices and cafeteria rules centrally, then tune them per site.
Exports and APIs
Pull transactions, sales reports and profiles whenever you want, through the admin tools or our documented API.
Frequently asked
questions.
Our Trust Center holds the policies, attestations and audit reports, and our security team will take the questions it doesn't cover.
