Twelve suppliers means twelve ways to be broken into.

Here's the part most companies never think about. Every link between two of your apps means a password stored somewhere, a key that never expires, and another copy of your staff's personal details sitting on somebody else's computer. Get rid of the links and all three go away.

What you're actually asking people to protect

If someone asks what you hold on them

By law, anyone can ask for everything you hold about them, or ask you to delete it. Across twelve apps that's two weeks of exports, a spreadsheet, and a quiet hope that nobody forgot the old customer system. In one place it's a search and a button, and you can prove you got all of it.

You decide who sees what

Salaries are visible to the people who need them and to nobody's spreadsheet. Letting a manager see their team's work doesn't mean showing them everyone's pay. And when you take access away, it's gone everywhere, straight away.

One history of every change

Twelve half-lists in twelve different formats don't add up to anything you could show an auditor. Here, every change (by a person or by the assistant) is written against the thing it changed, in one list you could hand to an auditor without explaining it first.

What we do, in plain terms

Your IT person will want the technical version, and we'll happily give it to them. Here it is in normal words.

Everything is lockedYour information is scrambled while it's stored and while it moves. Nobody can read it by picking up a hard drive.

No passwords to stealSign-in is a one-time code sent to an address we already hold, so there is no password store to breach. Before launch we will add sign-in with the logins your company already uses.

Permissions on the information itselfNot on the app. So opening one part of the business to a colleague never means opening the file behind it.

A record of every changeEvery deployment is versioned and every use of the assistant is written down for you to read. Before launch we will add a change history on your records that cannot be edited afterwards.

Backed upPoint-in-time recovery is switched on for the production databases, so we can put things back as they were at a particular moment. Before launch we will test restores on a schedule and publish it.

Your data stays where you sayKept and used in the country written into your contract. Not moved somewhere cheaper.

We limit our own people tooEach app runs under its own role with only the permissions it needs, and nobody has standing access to your records. Before launch we will log every staff access and show you the log.

Your company is kept apartYour information is separated from every other customer's by design, not by a setting somebody has to remember.

Your data, deleted or handed back on requestYour records are deleted on request, within thirty days, including from backups on their normal cycle. Until export is available in the product, ask us and we will provide your data in a standard format. Retention settings will arrive with the full platform.

Outsiders will try to break in on purposeBefore launch we will pay independent specialists to attack it, and we will share what they found with you.

Your information never trains anythingNothing you keep here is used to teach an AI model. Not ours, not anybody's.

Bring your own IT person. Bring your auditor.

We're happy to be checked. Send us your security questionnaire and we'll fill it in properly rather than pointing at a logo. We'll walk whoever looks after your data through how it works and where it physically sits, sign the paperwork, tell you which other companies are involved and warn you before that changes, and support a proper review on your terms.

Ask for a security review Ask for the paperwork

We're working towards the formal certifications, and we'll say so when we actually have each one, not before.