You are trusting us with your business.
Our agents reach into the systems you run on — your CRM, your inbox, your invoicing. That is a serious thing to hand over. Here is specifically what protects it, and what is still being built. We have tried to write this so you can check it rather than take our word for it.
Your data is separated from every other client's
Access is scoped at the database, not only in application code, and automated tests attempt to read across accounts on every deployment. If that isolation ever broke, the deployment fails rather than shipping.
Traffic is encrypted, and cannot be downgraded
HTTPS is enforced with HSTS and preloading, so a session cookie can never travel in the clear - not even on a first visit over an untrusted network.
Scripts are locked down
A Content Security Policy names every permitted origin. On pages handling credentials there is no inline script execution at all: a script must carry a per-request token it cannot predict, which is the control that stops injected code and card skimming.
Secrets cannot reach your browser
Every deployment is scanned for credentials in the code we send to browsers, and the build fails if any are found. Verified against a deliberately planted key.
Abuse is rate limited
Every endpoint is capped per address and per account, with automated screening on public forms. Bots are refused without a CAPTCHA for you to solve.
We store as little as possible
Only what we will genuinely use, with retention limits. Visitor IP addresses are stored as one-way salted hashes rather than as addresses. You can request an export or deletion of your data at any time.
What is not done yet.
Listed here rather than quietly implied, because a security page that overstates is worse than none at all.
Two-factor authentication on every client account
Required rather than optional, with backup codes and a recovery route that does not depend on us. Ships with the client portal.
Immutable audit log
A tamper-evident record of who accessed what and when, covering sign-ins, exports and any change to payment details. Ships with the client portal.
Encryption of personal fields at rest
Sensitive fields encrypted in the database, so a stolen copy is of far less use than the rows it contains. Ships with the client portal.
Independent security review
A full audit - code review, data-handling compliance, accessibility and performance - before any card payment is accepted on this site.
Working with us on data
We will sign a data processing agreement
Where our agents handle your customers’ data we act as a processor under GDPR, and you should have that in writing before anything starts. Ask on the call and we will send it.
You control what an agent can reach
Permissions are scoped to what the work needs, every action is recorded, and anything consequential waits for a human. You can revoke access to any system at any time without going through us.
Where your data lives
On EU infrastructure. Our processors are listed in the privacy policy, including what each one holds.
Found a problem?
Tell us before you tell anyone else and we will fix it and credit you. Use the contact form and mark it security — it reaches a person, not a queue.