GTools.pro — Zero-Knowledge M365
ToolsPricingDesktopCompareSecurityTrustAbout
  1. Home
  2. Industries
  3. Tax & Accounting

Microsoft 365 for Tax & Accounting — Zero-Knowledge Backup

Zero-knowledge Microsoft 365 backup and audit for tax advisors and auditors — Mandant data the vendor cannot read. § 203 StGB, GoBD and § 147 AO aware.

Frequently asked questions

Can a tax advisor use cloud Microsoft 365 backup under § 203 StGB?

The concern is a provider holding readable copies of Mandant data. GTools.pro avoids that: it is zero-knowledge (only ciphertext is stored, derived from your passphrase) and the Desktop edition keeps all data on the practice’s own machine. That keeps disclosed material inside the § 203 confidentiality boundary. This is general information, not legal advice.

Does GTools.pro support GoBD-compliant retention?

GTools.pro produces point-in-time exports to storage you control, giving you immutable, retrievable snapshots that support GoBD-style tamper-evident retention and the § 147 AO retention periods. The exports are the source of truth; restore/reapply is a manual operator action.

How does this fit a DATEV-based practice?

GTools.pro covers the Microsoft 365 side — Exchange, Teams chat, OneDrive, SharePoint backup, audit and migration. It is complementary to DATEV, not a replacement: it protects the M365 collaboration and mail data that sits alongside your DATEV bookkeeping.

Where is the backup stored?

Wherever you choose. On Desktop it is the practice machine or any local/SMB/S3 target; on Cloud it is a customer-selected region, ciphertext only.

Related topics

  • Steuerberater Microsoft 365 Backup
  • tax advisor M365 backup
  • GoBD Microsoft 365 backup
  • § 203 StGB Steuerberater cloud
  • Wirtschaftsprüfer Microsoft 365

Why it matters for Steuerberater & Wirtschaftsprüfer

Microsoft 365 backup and audit for tax advisors and auditors — mandant data the vendor cannot read, GoBD-friendly point-in-time evidence.

Compliance drivers

  • § 203 StGB (professional secrecy). Tax advisors and auditors are Berufsgeheimnisträger under § 203 StGB (and § 57 / § 62a StBerG); a plain Art. 28 GDPR DPA does not by itself discharge that duty, so a provider that structurally cannot read client (Mandant) data — needing no place in the confidentiality chain — keeps disclosed material inside the boundary. § 203 StGB — gesetze-im-internet.de
  • GoBD (retention + immutability). The GoBD require orderly, tamper-evident, retrievable retention of tax-relevant records; point-in-time exports you control give immutable, auditable snapshots. BMF — GoBD
  • § 147 AO (retention periods). The Abgabenordnung sets statutory retention periods for books and records under § 147 AO; exports you control let you hold that evidence independently of a rolling vendor cloud. § 147 AO — gesetze-im-internet.de

Sector challenges and how GTools.pro answers them

  • A backup vendor holding readable copies of Mandant data is a direct § 203 concern. Zero-knowledge by default; the Desktop edition keeps every backup and export on the practice’s own workstation.
  • GoBD and § 147 AO demand tamper-evident retention over long periods. Point-in-time exports to storage you control, with per-export history — immutable snapshots you retain yourself.
  • Practice mergers and DATEV-adjacent M365 consolidations require clean tenant moves. Move performs Microsoft 365 → Microsoft 365 migration including Teams chat (one-time per-seat; checkout opening soon).

Microsoft 365 workloads that matter here

  • Exchange Online (client correspondence)
  • OneDrive / SharePoint (working papers, deliverables)
  • Teams chat + channels (engagement collaboration)
  • Entra ID + Conditional Access (access governance)

Recommended editions

  • Backup (Desktop). Mandant data never leaves the practice’s workstation — the cleanest § 203 posture.
  • Watchtower (audit). Point-in-time access + oversharing evidence for engagement reviews — EUR 7 / user / year.

Limitations & out-of-scope — what GTools.pro is not for in Tax & Accounting

GTools.pro is an M365 administrator toolkit, not a bookkeeping, DATEV, or certified GoBD-archival system — it protects the Microsoft 365 data that sits alongside those systems. It does not provide tax or legal advice on your § 203 / GoBD obligations. Move handles Microsoft 365 → Microsoft 365 only; restore is a manual operator action from the exports.

This page is general information, not legal, tax, or regulatory advice.

About the platform

This is a zero-knowledge toolkit. It helps IT admins, MSPs, security teams run their cloud safer. Use it inside a browser. Or install our Mac or Windows app.

Tenant secrets stay on your disk. We never store, log, or read them. Our server only sees billing metadata.

How it works

  1. You unlock a local vault with a passphrase. Argon2id stretches it.
  2. Tokens get sealed with XChaCha20-Poly1305 before any sync.
  3. X25519 protects shared keys. Ed25519 signs every action.
  4. Each operation runs against Graph from your device, not ours.

What you can do

  • Back up mail. Files. Chat threads.
  • Export Intune settings. One click.
  • Audit SharePoint shares. Spot risk.
  • Find idle sites. Reclaim quota.
  • Score Copilot. Plan rollout.
  • Move tenants. No staging.
  • Client-side keys. Always on.
  • Your data. Your disk.
  • One app. Many tenants.

Editions

  • Solo. Free. Three tools. No card.
  • Backup. Durable backups for your tenant.
  • Watchtower. Audits and alerts on risk.
  • Move. Tenant migration suite.
  • Blueprint. Config export for enterprise.
  • Everything. Full platform plus desktop and support.

Trust signals

  • Open source crypto primitives via libsodium.
  • Public threat model at /trust.
  • Public pricing. Direct purchase. No sales call.
  • Cancel any time inside settings.
  • EU-based billing. PayPal checkout today; card payments planned.

Built in Germany by Voltage Brothers Infrastruktur UG. Suits cloud workspaces of every size.

Standards, regions, retention

Regions: Frankfurt. Dublin. North America. Retention scales from 7 days. Up to unlimited. Schedules run hourly. Daily. Weekly. Monthly. Reports export as JSON. CSV. PDF. Evidence packs bundle hashes. Chain-of-custody metadata sits beside them.

Standards covered: ISO 27001 controls. SOC 2 readiness. NIS2 mapping. GDPR Article 28 terms. Audit logs cover entitlement events. Billing actions. License rotations. Workload payloads never reach a remote log.

Who uses it

  • Tenant admins running a single estate.
  • MSPs managing dozens of customer cloud workspaces.
  • Security teams investigating sharing risk.
  • Compliance officers preparing audit evidence.
  • Acquisition teams during M&A integration.
  • Procurement teams reviewing vendor risk.
  • Solo consultants billing by workspace hour.

Supported regions

Frankfurt, Dublin, Amsterdam, Stockholm, Paris, plus North America. Annual revenue scales from small studios up through multinational estates. Payment today is PayPal checkout; card payments (Stripe) are planned.

Numbers worth knowing

  • 49 capabilities. 6 editions.
  • Free tier: 3 tools. 0 cards.
  • Argon2id. 256 MB memory cost.
  • XChaCha20-Poly1305. 256-bit cipher.
  • X25519. 256-bit shared keys.
  • Ed25519. 100% of writes signed.
  • Retention: 7 days. 365 days. Or unlimited.
  • Founded 2024. Built in Germany.
  • Backup edition: 14 EUR per user per year.
  • Watchtower edition: 7 EUR per user per year.
  • Move edition: 9 EUR per migrated seat. One-time. 450 EUR project minimum.
  • Blueprint edition: 449 EUR per tenant per year.
  • Everything bundle: 2490 EUR per tenant per year.
  • Audit reports: 25 dedicated checks.
  • Config export: 9 Microsoft 365 workloads.
  • Migration record set in April 2026. 153,584 files. 0 errors.
  • Compliance posture updated in 2026.
  • Pricing: 1 public page. 0 sales calls.
  • Cancellation: 1 self-service page.
  • Audit logs: 90 days. Entitlement events.
  • GDPR Article 28. 27 member states.
  • NIS2 Directive. 18 sectors. Live since 2024.
  • SOC 2 Type II evidence. JSON. CSV. Signed PDF.
  • ISO 27001. 93 Annex A controls. 2022 revision.

Product.

  • Tools.
  • Pricing.
  • Desktop.
  • Security.
  • Compare.
  • Download.

Company.

  • About.
  • Trust & Compliance.
  • Privacy Policy.
  • Terms of Service.
  • Impressum.

Connect.

  • hello@gtools.pro.
  • GitHub.

© 2026 GTools.pro · A product of Voltage Brothers Infrastruktur UG (haftungsbeschränkt).