Security and privacy
This page describes what is actually in place in the system, rather than general promises.
Controls in the system
User account protection
Passwords are stored as BCrypt hashes, never as plain text, and a reset flow is available.
Two-step verification
An option each user can turn on, with a code by email or from an authenticator app (TOTP).
Permission management
User roles and per-screen permissions: view, add, edit, delete, export and print.
Encryption
Access runs over HTTPS, and authenticator secrets are encrypted with AES when stored. This page does not claim that all stored data is encrypted.
Audit log
A log of sensitive actions such as subscription renewal, showing the user, action, time and IP address, visible to the company admin.
Your business data
Each business's data is tied to its account, and access requires sign-in and user permissions.
Your data and subscription
Backups
For the backup policy and retention period in place, please contact support.
Cancelling a subscription
Nothing is charged automatically: you decide when to renew. If you don't renew, the subscription ends on its date and sign-in stops. You can also stop a branch's subscription from the branches screen.
Exporting and retrieving data
Export lists and reports to Excel based on your permissions. For wider export or retrieval requests, contact support before your subscription ends.
Policies
Read the privacy policy and terms of service.
Have a security question?
Contact us and we'll give you the details.