SECURITY & COMPLIANCE
Your financial data deservesenterprise-grade protection
We take security more seriously than anyone — because your business finances are at stake. Here's exactly how we protect you.
🛡️Security Program
🔐Policy Controls
🇪🇺GDPR
💳Payment Security
Certifications
Independently verified, annually
🛡️
Security ProgramActive
Security, access control, and data protection practices are reviewed regularly as the platform grows.
Last verified: Ongoing
🔐
Policy ControlsManaged
Internal controls, operating procedures, and secure handling standards help protect customer data.
Last verified: Ongoing
🇪🇺
GDPR CompliantCompliant
Full compliance with EU General Data Protection Regulation. DPA available on request.
Last verified: Ongoing
💳
Payment SecurityProtected
Payments are handled through secure providers, with encrypted transport and careful operational controls.
Last verified: Ongoing
🏛️
CCPA ReadyCompliant
California Consumer Privacy Act compliance for all US-based users and data processing.
Last verified: Ongoing
✅
Service StandardsDocumented
Operational standards and documented processes help us deliver support and product updates consistently.
Last verified: Ongoing
How We Protect You
Security at every layer
🔒
AES-256 Encryption
All data encrypted at rest using AES-256 and in transit using TLS 1.3. Zero plaintext storage.
🌐
Managed Cloud Hosting
Served from a global edge network with a managed Postgres database. Current availability is published on our status page.
🔑
Tenant Isolation
Every query is scoped to your company. One customer's records are never reachable from another customer's session.
👁️
Continuous Monitoring
Automated platform and error monitoring, with alerting on failures and anomalous activity.
🔄
Automated Backups
Daily automated backups are handled by our managed database provider, with restore available on request.
🚪
Role-Based Access Control
Granular permissions system. Every user sees only what they need to see — nothing more.
📋
Full Audit Logs
Every action in the system is logged with timestamps, IP addresses, and user identity.
🧪
Security Reviews
Security checks and platform hardening are performed regularly as part of our release process.
Infrastructure
Global infrastructure, local compliance
PRIMARY
🇸🇬
Singapore
Primary database
ap-southeast-1
🌍
Worldwide
Application edge
global CDN
🏛️ Enterprise customers can choose their preferred data residency region for full regulatory compliance.
Security FAQ
Your questions, answered honestly
🛡️
Have a specific security question?
Our security team responds to all enquiries within 24 hours. Enterprise customers can request our full security documentation pack.