AccountBooks Online Security Policy

Last updated 6th April 2021

Server and Data Security

Security is one of our top priorities and we follow best practices as much as we can to secure servers and data.

This includes:

• Using and enforcing strong passwords
• Addressing security issues in a timely fashion
• Using HTTPS and 256-bit SSL encryption between you and the server
• Giving access to data on a least necessary basis, in other words people only see the minimum amount of information required

Reliability

We currently use managed hosting to run AccountBooks Online, the hosting provider runs monthly audits on all servers and continually monitors them for any issues.

In terms of data backups, the hosting provider offers 30 days of backup and we also perform our own periodic backup which we store on our own server.

Think You Have Found a Security Vulnerability?

If you think you have identified a security vulnerability with our application or website, we would greatly appreciate it if you report it to us and allow us time to address it before any details go public.

Once we have addressed and released a patch for the issue, we will issue a report on what was found and how it was addressed.

While we welcome "whitehat" researchers, please do not exploit any vulnerability found to:

• Access, modify or delete any customer or business data stored
• Cause downtime or degraded service

If any user is found to breach these above conditions, the relevant authorities will be contacted. While you conduct your research, please create your own test accounts to test against.

You can send your finding to [email protected] and we will aim to respond within 48 hours.