Security and your data
Where your records are stored, who can see them, and the controls behind that, in brief.
In brief
The security page sets out each control and what backs it. The short version:
- Your records are stored in Sydney.
- Separation between organisations is enforced by the database on every table, and tested.
- Original documents are never changed after they arrive.
- Nothing reaches a supplier unless a person presses send, and supplier email starts off.
- Every consequential action is in an append-only audit log.
Still stuck? Write to hello@costcode.co.