Your data. Under your control.

Application servers and database are located in data centres in Frankfurt am Main (EU) – part of the written commitments you receive before signing. The user interface is delivered via our hosting provider’s global network; your data is not stored there and passes through in encrypted form only. If you also use the AI assistant LuCy, we set out in writing before go-live where its processing takes place and on what contractual basis.

For application servers and database we commit to data centres in Frankfurt am Main. Before the contract is concluded, we disclose which providers are involved there and for the optional AI assistant, where they process data and on what contractual basis; you receive the list of sub-processors before signing. Our privacy policy applies to email traffic.

That is our commitment: nobody without your instruction. For support or troubleshooting we access data only when you request it – tied to a named person, limited to the case and logged. You can end the access at any time.

Group structures, ownership interests, country-by-country reports, financial figures and tax positions – company data. Pillarworks is designed for company data. Personal data is mainly your team’s user accounts (name, email address, role), contact details that individual authorities require in the return, and notes on who prepared a figure. Payroll costs and headcount enter as totals per entity or per jurisdiction, not per person. The data processing agreement sets out the categories in detail.

That is what we commit to: every group works on its own separate data set with its own access. There is no exchange between the data sets of different groups – not in analyses or comparisons.

We commit to encrypted transfer and encrypted storage. Methods and key management are set out in the technical and organisational measures you receive before signing.

L+C Technology itself is not certified. We commit to using only data centres certified to recognised standards such as ISO 27001; you receive the evidence with the contract documents. We disclose our technical and organisational measures and answer your IT department’s due diligence questions directly.

We commit to regular backups. Frequency, retention and recovery are part of the contract. Independently of that, you can save your data set yourself at any time as a project file.

You export your data – group structure, computations, reports – as Excel, GIR XML and project file. We then delete your data including backups within the agreed period and confirm the deletion in writing. Where statutory retention obligations prevent deletion, we block the records concerned from further processing and delete them once the period has expired.

A data processing agreement under Art. 28 GDPR, the technical and organisational measures, the list of sub-processors with a right to object to changes, the backup and deletion policy and, on request, a non-disclosure agreement before detailed discussions – all before signing. The roles model follows before go-live.

The contracting party for the software is L+C Technology GmbH. We develop software and do not provide tax advice. Tax advice is provided on request by LOHR+COMPANY GmbH Wirtschaftsprüfungsgesellschaft – always under a separate engagement that you enter into directly with them.

No. The demo and the first conversation run using the fictional group Aurora Energie SE. Your own data only comes into play when you decide – after consultation with your IT and data protection departments and on a contractual basis.

No. This website sets no cookies, stores nothing in your browser’s local storage and embeds no third-party scripts. Your enquiry via the contact form is transmitted to our server over an encrypted connection, forwarded by email to our mailbox and used only to handle your request.