Show HN: Infinity – Flexible Work Management Software

> We implement appropriate technical and organizational measures to protect the information we collect and store.

I have not found any relevant info on what actual measures are implemented. This is a big issue under the GDPR because without further info it's not possible to understand if sufficient measures are implemented. In short, the GDPR requires that all appropriate measures are adopted. Without knowing what measures this service implements, potential users cannot access if this app is sufficiently secure for their use cases. As a result, in case of breaches, they might be liable for wrongly selecting this as a service to manage their data (e.g. customers contact info). IMHO, given the above there's no excuse for not encrypting data (in a way that makes it accessible to law enforcement authorities where needed), so if that's not part of the security measures implemented by a service, for me it's a deal breaker.