Home / Security
SecurityYour data. Only yours.
The board runs on your own hosting. At handover, you change the database passwords. We have no access to your database or hosting, and your team's data is never sent to us.
Privacy by design
Your own hosting
Your own copy of the app, on your own hosting and domain. Never shared with another customer.
You hold the keys
At handover, you change the database and hosting passwords. After that, only you have them. We keep no copy.
Not sent to us
The app sends only your licence key, domain and app version. No reports, leads, invoices or team data.
Safe updates
Every update is signed and checked before it installs. If anything goes wrong, it rolls back automatically.
You take the keys
We set everything up, then hand it all over. This is the step that puts your data fully in your hands.
We set it up
We install your branded copy on your hosting and add your team.
You change the passwords
You change the database and hosting passwords to ones only you know.
We step back
From then on we have no login to your database or hosting.
Updates keep coming
Signed feature updates reach your app without us touching your data.
Protection, built in
Beyond who holds the keys, the app itself is built with careful safeguards.
- Passwords are stored as one-way hashes, never as plain text
- Sign-in sessions use secure, HTTP-only cookies
- Repeated wrong sign-in attempts are slowed down automatically
- Database queries use prepared statements
- Updates are signed, syntax-checked and reversible
- A built-in backup tool with a weekly reminder for the admin
Better, together
Because the board runs on your hosting, a few good habits keep it secure. We'll walk you through them at handover.
Strong passwords
Use long, unique passwords for hosting and the database.
Regular backups
Use the backup tool and keep a copy somewhere safe.
HTTPS on your domain
Keep the SSL certificate on so traffic stays encrypted.
Right access
Give admin access only to people who need it.
Security questions
Who can see my data?
You. After handover, your database lives on your hosting and you change its passwords. We have no access to your database or hosting, and your team's data is never sent to us. Read more on the Security page.
What does the app send to you?
Only what's needed to check your licence and offer updates: your licence key, domain and app version. No reports, leads, invoices or team data.
What about backups?
The app has a built-in backup tool and reminds the admin weekly. Keeping your own backups is part of the Terms.
What happens when you release updates?
Updates are signed, checked before they install, and undone automatically if something looks wrong. Your branding and customisations stay as they are.
Read the details in our Privacy Policy.
Questions about security?
Ask us anything. We're happy to explain exactly how your data is handled.