Hosting region
Customer data is primarily processed in the UK and EEA.
Security
Security and trust
How we protect your workspace and your clients’ data.
Encryption
Encryption in transit and at rest.
Single sign-on
Sign in with Google or Microsoft.
Two-factor authentication
Two-factor authentication with recovery codes, which admins can require.
Backups
Regular backups. Residual copies are rotated out after account closure.
Security reviews
Regular security reviews and vulnerability management. We do not publish a penetration test schedule or hold certifications yet.
Your workspace controls
Access control
Role-based permissions, two-factor authentication and personal session controls keep access scoped.
Privacy
Client portal sessions are revocable and share links expire.
Retention
Workspace retention settings, contact erasure and data export controls are built in.
Responsible disclosure
Found a vulnerability? Contact us with the details and steps to reproduce. Please do not access other customers’ data or disrupt the service.
Contact usDocuments
Our legal documents are drafts awaiting approval.
Sub-processorsData Processing Agreement
Privacy Policy
Service status
Check current availability.
Status