Customized software for secure online consulting

Confidentiality (using end-to-end encryption and SSL or TLS), data integrity (using hash functions) and availability are important requirements for secure communication. In addition, the server and company headquarters must be located within the EU, the consulting tool should be ISO/IEC 27001 certified and comply with the GDPR. These requirements are of course met by makandra's individual consulting software.

No, because emails are not end-to-end encrypted by default. However, counsellors are subject to confidentiality in accordance with Section 203 of the German Criminal Code (StGB) and must therefore ensure that communication with those seeking advice cannot be leaked to third parties at any time - whether due to technical or organizational deficiencies. As the advisors are unable to trace whether emails are also transmitted unencrypted to the recipient, such a communication channel is unsuitable. Unauthorized disclosure of entrusted secrets is a criminal offence for persons subject to professional secrecy.

With end-to-end encryption, public keys that encrypt the message are exchanged by the sender and the recipient before communication begins. The message can then be decrypted using a matching private key. For a consultation via e-mail, however, a browser extension must first be downloaded to the computer of both parties. End-to-end encryption is therefore necessary, but does not enable low-threshold and spontaneous contact in the context of advice via email.

A hash function is a mathematical function that can be used to check whether a message has been manipulated between the sender and recipient. The function is used to convert the input into a hash value. This is unique and must not allow any conclusions to be drawn about the content of the message. Similar content must therefore not provide a similar hash value. The receiving computer checks whether the hash value is identical to the original value.

Digital signatures can only be used to check whether the content of a message has been changed without being able to view the manipulated parts. With electronic signatures using GPG, on the other hand, manipulated content is made visible to the recipient.

Plug-ins that are installed by the sender and only encrypt attachments are unsuitable for protecting personal data in emails. Even transport encryption using TLS or SSL only guarantees encrypted transmission to the mail provider's server, but not to the recipient of the message. End-to-end encryption is therefore absolutely essential and SSL or TLS alone is insufficient.

All content of communications between advice seekers and advisors is encrypted end-to-end and cannot be viewed by makandra as the operator. For the purpose of visiting the web application, we only collect and process the information that the Internet browser automatically transmits to us in order to deliver the contents of the web application correctly, to ensure network and information security and to protect the application from attacks, malfunctions and damage. 

Der Datenschutz steht bei der Beratungssoftware von makandra an oberster Stelle und gewährleistet den DSGVO-konformen Austausch sensibler Themen und Daten. Wir halten uns dabei an die Grundprinzipien Datenvermeidung und -sparsamkeit sowie Zweckbindung und Rechtmäßigkeit. Das Verhalten der Klientinnen und Klienten wird weder mit Cookies noch mit einer Tracking-Software beobachtet.

Yes, you are very welcome to test the consulting software without obligation. Please use the contact form at the bottom of the page or contact us by email at fabian.rimpl@makandra.de or by phone on 0821 588 66 167.