Security & data
Your data, handled with care.
You are trusting us with your finances, customers and operations. Here is how we protect that trust.
Confidentiality agreements
Every team member signs a confidentiality agreement before working on client accounts. We sign your NDA too.
Least-privilege access
People only get access to the systems and data their tasks need, and access is removed when it is no longer needed.
Individual logins
No shared passwords. Each person uses their own login in your systems, so every action can be traced.
Multi-factor authentication
MFA is required on email, password managers and client systems wherever the system supports it.
Work stays in your systems
We work inside your cloud tools and avoid downloading client data to personal devices or local drives.
Managed devices
Work devices are password-protected, kept up to date, and run security software.
Privacy by design
We collect and see only what the work requires, and follow your retention and deletion rules.
Training & supervision
Staff are trained on data protection and phishing, and team leads review work every week.
Compliance
Aligned with the laws that matter to you.
We handle personal data in line with Sri Lanka's Personal Data Protection Act and the requirements our clients operate under, such as the Australian Privacy Act, UK GDPR and Canada's PIPEDA. We are happy to sign your data processing agreement.
Need our security details?
We can complete your vendor security questionnaire and walk your team through our controls before any work begins.
Ready to take work off your plate?
Book a free 30-minute discovery call. We will look at your workflows and tell you honestly what we can take on and what we can automate.