Access control
- Workspace admins invite and remove people. Removing someone ends their access straight away.
- Roles decide who can create sites, edit templates or sign reports.
- Guests are limited to the conversations they are invited to.
Data protection
- Data is encrypted in transit and at rest.
- Data is stored in secure, access-controlled cloud data centres.
- Backups are taken daily and tested regularly.
- Signed reports are locked. Any later change creates a new version and the QR check shows which copy is the original.
Operations
- Our staff access customer data only when needed to support you or keep the Service running, and that access is logged.
- We review our service providers before we use them.
- We monitor the Service for unusual activity.
Reporting a problem
If you think you have found a security issue, please follow our vulnerability disclosure policy.