Security and data protection
Tvarka holds company contracts, accounting and signatures – so security here is not a section at the bottom of the page but the foundation of the architecture. Below is how it works, without the marketing fog.
Identity instead of passwords
You sign in to Tvarka with e-signature credentials – Smart-ID, Mobile-ID or your Lithuanian eID card. This means every user's identity has been verified with a qualified identity credential, not by trusting an email address. Passwords that could be leaked or guessed simply do not exist here.
The Manager controls access
Access to a company in Tvarka is granted only by its Manager – the Manager invites an accountant, deputy or authorised representative and delegates rights. No outside person can "join the company" without the Manager's decision, and the Manager can revoke granted access at any time. Each company's data is kept separate from the others.
Where and how data is stored
Data is stored in European Union data centres and nowhere else. Traffic between your browser and Tvarka is encrypted with TLS. The document vault keeps a version history – you see what changed and when, while signed versions remain unchanged.
Signatures under eIDAS
Qualified electronic signatures (QES) are created through qualified trust service providers (QTSP) and comply with the eIDAS Regulation – they are valid in courts, at the State Tax Inspectorate (VMI) and at the Centre of Registers (Registrų centras). When signing, a control code is shown and you confirm it on your own device, so a signature cannot be attached to a different document behind your back. Documents are prepared for long-term storage in the archival PDF/A format.
GDPR and responsibility
Personal data is processed in accordance with the GDPR. The data controllers are the INVENT law firm of attorney M. Kiskis and Socialiniai algoritmai, UAB; the grounds for processing and your rights are described in detail in the privacy policy. A law firm stands behind the platform's legal side – this is not just a technology project.
Spotted a vulnerability?
If you have found a security issue or have questions about data protection, contact us – security reports are handled first.