Skip to content

Security

Your business data, kept to itself.

Your orders, prices, customers and takings are the business. Here is how we keep them safe, in plain words.

Report a security issuePrivacy policy

What we do

Six things that protect every business.

The same protections apply to every account, whatever the plan.

  • Each business kept apart

    Every request is checked on our servers against the business it belongs to, so one business can never read another’s records. A sign-in only works on the address it was made on.

  • Strong sign-in

    Passwords are stored only as one-way hashes. Two-step sign-in with an authenticator app is available, and a business can require it for its admins. Repeated failed sign-ins are blocked.

  • Roles and permissions

    Staff see and do only what their role allows: the till, the warehouse or the money. The owner decides who gets what.

  • Encrypted and hosted in the UK

    Every connection uses HTTPS. The platform and its database run in DigitalOcean’s London region, the database is backed up daily, and keys for connected accounts are encrypted with AES-256-GCM.

  • AI with guard rails

    The AI assistant reads only the records of the business it is working for. Instructions hidden inside data are fenced off and tested for, and it asks before it changes anything.

  • Checked on every release

    Automatic tests and checks run on every change. Errors are monitored, and each release is health-checked as it goes live and rolled back automatically if it fails.

Data protection

Under UK law, and registered.

Tech Me Today Ltd handles personal data under the UK GDPR and the Data Protection Act 2018, and is registered with the Information Commissioner’s Office (registration no. ZB944663).

For the records a business keeps about its own customers and staff, that business decides how they are used and we act only on its instructions. The data is never sold and never used for advertising.

The privacy policy lists every provider we use, what each one is for, and how long we keep data.

Privacy policyCookie policy

Reporting a security issue

Found something? Tell us first.

Email support@easytaskr.com with “Security” in the subject, and include the steps to see the problem. A person reads every report.

  • Only use your own account or test data; do not open, change or delete anyone else’s.
  • Do not run tests that slow the service down or flood it with traffic.
  • Give us a reasonable time to fix the problem before telling anyone else.