Security at CapaOne
Who is responsible for security, and how to reach us.
Responsibility
CapaOne is developed by CapaSystems A/S in Taastrup, Denmark, and hosted in the EU. Overall responsibility for the security of CapaOne lies with:
Report a vulnerability or security concern
If you believe you have found a vulnerability in CapaOne, or have a security question about the platform, write to security@capasystems.com. We read reports in English and Danish.
To help us act on a report quickly, please include:
- a description of the issue and where you found it,
- the steps needed to reproduce it,
- what an attacker could achieve by exploiting it, as far as you can tell.
Please give us a reasonable chance to fix an issue before you share it with others, and do not access, change or delete data that is not yours while you investigate.
A machine-readable version of this contact information is published at /.well-known/security.txt.
Assurance reports
ISAE 3000 Assurance Report 2025–26
Independent auditor’s ISAE 3000 report with limited assurance on information security and measures pursuant to the data processing agreement for the CapaOne platform, covering 1 July 2025 to 28 August 2026. Issued by PKF Munkebo Eriksen Funch.
Download the report
Fill in the form and we'll take you straight to the PDF.
Our ISAE 3402 report will be published on this page once it is available.
Other questions
For questions that are not about security, contact CapaSystems A/S at info@capasystems.com or +45 70 10 70 55.
CapaSystems A/SRoskildevej 342C
DK-2630 Taastrup, Denmark