Skip to content
Zentra
DemoFree trial

Your data.
With full transparency.

What stays on your device and what is shared
and the choices that are yours.

On your device.

Gestion keeps a local working copy. After activation, local features do not require a permanent connection.

The data concerned
  • Customers and suppliers
  • Employees, payroll and pay settings
  • Projects, tasks, calendar and hours
  • Quotes, invoices and working documents
  • Bank statement import and reconciliation
  • Accounting entries, VAT and closings

With your company.

Connecting lets you share saved changes with authorised members and use enabled online services.

The data concerned
  • Email address, display name and account session
  • Company, roles, invitations and authorised devices
  • Name, contact details and activity shared to join a company
  • Subscription and licence status
  • PDFs deliberately placed in the shared vault
  • Attachments to projects connected to the company
  • Complete database, payroll, logo and attachments of the shared company
  • Complete database and attachments when remote backup is enabled
Your account’s protections

Concrete, verifiable protections.

Account separate from business data

Supabase Auth currently manages identity and session. Tokens used by the website are placed in HttpOnly cookies; this mechanism does not copy the complete business database.

Versioned archives

Each archived PDF receives a SHA-256 hash, a version and a calculated retention deadline. A correction adds a version instead of overwriting the original.

Verified licence and updates

The licence and update packages use signatures checked by the application before acceptance.

Your backups and archives

Your backup stays in your hands.

Local backup

Zentra can create and restore a full backup. You choose its location and must regularly keep an external copy, then test its restoration.

Optional PDF vault

The vault retains requested PDF versions with a calculated deadline. It never backs up the entire SQLite database and is not presented as certified WORM storage.

Complete remote backup

The account holder and administrators can upload the company database and its attachments, including payroll. The daily copy is enabled on request and requires the application to be open and connected. File hashes and database integrity are checked during restoration. Backups remain recoverable from the account after cancellation.

Keep an external copy and check that it can be restored. Complete backups cover the business database and its attachments; they do not merge changes made separately on several devices.

Services that process your data

The current technical chain.

Supabase

Authentication, contact details and continuous sharing of the complete database from version 1.67, on the Supabase project created in the Zurich region (eu-central-2). Revisions and files remain private, and every request checks the member, their role and their device. Sharing includes payroll and requires explicit activation.

D1 / R2

Storage of access credentials, PDF archives, private project files and complete backups enabled by the company. Project files synchronise between authorised devices. The Supabase project location does not guarantee Swiss storage of this D1/R2 data.

Stripe

Subscription payment and Stripe billing when subscribing is enabled. Card data does not pass through the Zentra form.

Cloudflare

Hosting of the public website and its APIs on Cloudflare Workers, available at zentraapp.ch, with traffic protection.

Supabase manages authentication and private revisions of the shared company. Accounting, documents, payroll and settings are automatically received by authorised members. Reception waits for forms in progress to close. Two copies edited simultaneously may require conflict resolution; local changes are backed up. Roles, devices, archives and historical file services also use D1/R2.
Installation, signatures and certifications

A clearly documented installation.

Built-in updates verify a package signature. The public Windows installer is not yet signed with an Authenticode certificate and may display “unknown publisher”. The macOS build is available in early access with an ad hoc signature and without Apple notarisation. On both platforms, built-in updates verify the package signature before offering installation. On Mac, Keychain may request renewed access authorisation after an update of this early-access version.

View installation information

Current scope

  • Windows distribution with signed updates; Authenticode certificate forthcoming.
  • macOS available in early access; Developer ID signature and notarisation forthcoming.
  • Supabase authentication linked to the Zurich region; account/archive APIs are in transition.
  • Swissdec, FTA or GeBüV validation remains a separate process.

A question about your data?

We are here to answer your questions.