Frequently asked questions

Find answers to frequently asked questions about security, reliability, privacy, and compliance.

The availability status of our products can be found on

The certifications that our products have can be found on this page.

An overview of the sub-processors which Exact may use to deliver (parts of) the Exact Services and process your Business Data as further described in the Privacy Policy can be found on this page.

Exact’s Privacy Policy for Exact Services can be downloaded from this page in both Dutch and English.

If you discovered a vulnerability in one of our products, we appreciate if you let us know so we can get it fixed as soon as possible. On this page you can find our instructions for how to report it and you could get added to our Hall of Fame.

You can find the information about the processing of personal data in the Privacy Policy for Exact Services (for customers) and the Privacy Statement and the Cookie Policy (for website visitors).

Depending on the Exact Services you have requested, your Business Data may be stored on servers of our sub-processors, which are located in different datacenters. Depending on your Exact Services, these servers may be located outside of the EEA. The locations of our datacenters for storage purposes are shown in our Privacy Policy for Exact Services, which can be downloaded from this page in both Dutch and English.

These can be requested through the Support Portals of the products, that can be found on

Exact encrypts customer data in transit and at rest.

The results of penetration tests performed on Exact products are only shared with auditors as part of third party attestations (ISAE3402). For further inquiries contact

Exact’s security and technology policies are not shared externally.

For questions about pentests, reach out to customer success. To report an incident send an email to

In the event of an incident resulting in a data center failure, the RPO (recovery point objective) for the Premium editions of Exact Online is 1 hour. The RTO (recovery time objective) depends on the circumstances at related (sub) services and will be determined and communicated (upon request) in case of any incident.

You can update your email preferences on this page.
EN Select your country