Norman
Back to the help center
Account and settings

Data security and deleting your account

How Norman protects your PESEL and KSeF token, how to switch on two-factor authentication, archive a company, delete your account and which documents to keep before you do.

Updated

How Norman protects your data

  • Norman stores your PESEL encrypted. Only the company owner can see or change it. In JPK files and returns, Norman uses the date of birth read from the number.
  • Your KSeF token is encrypted, and Norman never shows it, not even to you. To change it, paste a new token. Norman needs only the permissions to issue and view invoices: give the token no others.
  • Bank: Norman only reads transactions and does not order transfers from your account.
  • Norman is hosted in Germany.

Two-factor authentication

  1. Open Account → Settings, section Security.
  2. Choose an authenticator app or SMS and click Enable.
  3. Save your recovery codes somewhere safe: you need them if you lose access to your phone.

To switch it off, click Turn off two-factor authentication and enter a current code.

Your login email

You cannot change the email address you log in with yourself: contact support. The company email that goes on invoices and into the JPK you change under Account → Personal.

Archiving a company

If you have several companies in Norman and one of them has stopped trading, the owner can archive it: Archive company. Archiving takes the company out of the company switcher and stops new work being booked to it. Its books, invoices and documents stay, and an accountant can still open it.

Deleting your account

  1. Download the data you need to keep (see below).
  2. Open Account → Settings, section Danger zone, and click Delete account.
  3. Give a reason and confirm.

Deleting your account starts a grace period of a few days. After that, your data, including invoices, expenses and documents, is permanently deleted. Norman cancels an active plan when you delete your account. To delete your data or sign up again immediately, contact support and request forced deletion.

Cancelling a plan is something else: see Plans and billing.

What to keep before deleting

You keep your books and accounting records until the tax liability becomes time-barred (art. 86 § 1 of the Tax Ordinance), usually 5 years from the end of the year in which the tax payment deadline passed (art. 70 § 1 of the Tax Ordinance). Before deleting your account, download:

  • a data package from Accounting export: see Exporting data for your accountant,
  • filed JPK_V7 files and UPOs from Files or from the report pages,
  • your sales invoices as PDFs (invoices KSeF accepted are also in KSeF).

After deleting your account you can no longer download this data from Norman.