Security & privacy

Security and privacy in WrkLst. Where your data lives, who gets to see it, how you take it with you, and how you keep your sign-in safe.

Your account has a database of its own, kept apart from every other account. Everything travels encrypted and is stored encrypted, on European servers in Germany and Finland, with backups in Switzerland.

Inside your account, roles decide who sees what. Prices, confidential notes, confidential contacts and documents each have their own permission, and so does exporting a backup. Give every role only what the work needs.

One login protects every account you belong to. Choose a password of at least twelve characters, or sign in with a passkey, which counts as the second factor on its own. Repeated wrong attempts are slowed down.

Under Settings, Name and Security, turn on two-factor authentication. After your password, WrkLst then asks for a six-digit code from your authenticator app. Keep the recovery codes outside WrkLst. Each one works once.

On a shared computer, choose This session only. On your own, you stay signed in for ninety days after your last visit. Lost a phone? Reset your password and tick Also disconnect my apps and devices.

An AI assistant you connect works as you, with exactly your permissions, in one account. You see it, and disconnect it, under Connected apps. And administrators see every request, from the web, the app or an assistant, in the Interaction Log.

Administrators also get a security check, under Settings, Security. Every morning it scores the account and lists what to fix, such as a sign-in without a second factor, or from an unexpected country. Switch on alerts, and new findings come to you.

WrkLst's own AI runs only when you start a feature marked as AI, such as Artwork Import. It uses open-source models hosted in Switzerland, never records your prompts and never trains on them. Administrators can switch it off for the whole account.

Your data stays yours. Under Settings, Backup, create today's full database backup, or a contacts export with a vCard file and a spreadsheet. Confidential notes are included only if you may read them. Keep the file somewhere safe.

WrkLst never sells your data or shares it for advertising. You can see, correct, export and delete it at any time, and a deleted record can be recovered for seven days. Need a data processing agreement? The support team sends you one.

Five habits make the difference. Give each person their own login. Turn on two-factor, or use a passkey. Keep roles narrow, especially for prices and exports. Sign out on shared computers. And disconnect what you no longer use.

That's security and privacy in WrkLst. Your sign-in is under Settings, Name and Security, and backups are under Settings, Backup, for everyone whose role includes them.