At Express, we always prioritize security, responsibility, and precision

Our business is built on our customers’ trust – trust that we handle the data entrusted to us in accordance with the law, our internal guidelines, and our customers’ expectations.

We protect your data through clear, transparent, and efficient processes, where both handling and access are always limited to what is strictly necessary to complete the task.

We do not take trust for granted – we earn it. That is why we have established a solid foundation of policies, procedures, and controls, which we follow consistently in our day-to-day work. Our efforts are continuously documented and validated through two annual ISAE 3000 Type II reports, performed by Ernst & Young.

At Express A/S, we know that trust begins with security.

Data security

We host all our servers with Sentia in highly secured data centers located in Denmark. This ensures that your data always remains under Danish jurisdiction, where GDPR and data protection are an integral part of operations. 

All data exchange takes place exclusively via encrypted connections (SFTP) to prevent unauthorized access, and we only retain data for as long as necessary to complete the specific task.

Security through simplicity – fewer links, fewer risks.

• Data is deleted according to defined and regularly reviewed procedures once the purpose is fulfilled.
• Our IT infrastructure is built on simplicity, transparency, and security.
• Customer information is handled safely and securely every step of the way. 

GDPR and process

Each task is handled completely separately in its own dedicated area on our servers. This separation applies throughout our entire infrastructure – from databases and file systems to internal processes and access management.

In this way, we ensure that data from different customers or projects is never mixed or overlaps, and that no information can be accessed unintentionally across tasks. It is a simple and secure method that reduces complexity and minimizes the risk of errors or data leaks.

At the same time, it makes it easier to document and comply with applicable information security requirements. The result is a transparent and controlled process in which all customer data is handled correctly and in full compliance with the GDPR.

GDPR and process

Each task is handled completely separately in its own dedicated area on our servers. This separation applies throughout our entire infrastructure – from databases and file systems to internal processes and access management.

På den måde sikrer vi, at data fra forskellige kunder eller projekter aldrig blandes eller krydser hinanden, og at ingen information utilsigtet kan tilgås på tværs af opgaver.

Det er en enkel og sikker metode, der reducerer kompleksitet og minimerer risikoen for fejl eller datalæk. Samtidig gør den det lettere at dokumentere og efterleve gældende krav til informationssikkerhed.

Resultatet er en gennemsigtig og kontrolleret proces, hvor alle kundedata håndteres korrekt og i fuld overensstemmelse med GDPR.

Production

Production takes place in a security zone with physical access control, where only PET-cleared employees with a documented work-related need are granted access. 

We follow our core principle: simplicity creates security. Each task is handled completely separately – from printing and enveloping to delivery. For example, if we receive 811 letters, we deliver exactly 811 letters. This manual reconciliation, combined with the clear separation of tasks, allows us to document every single step of the process.

The result is full traceability and peace of mind.

• You can trust that all data is handled correctly, securely, and without any risk of mix-up.
• We never read, record, or store any personal data from any of the letters.
• Security through simplicity – because the most secure solution is often the simplest one.
• All processes are carried out under strictly controlled conditions.