Your data, kept safe

Where your data is kept

The software runs on Google Firebase, part of Google Cloud. Your practice's database and file storage are stored in the UK, in Google Cloud's London region.

Each practice's data is kept apart by rules in the database itself, not only on screen.

Who can see it

• Only the users your admin invites can open your practice.
• Each user signs in with their own account, using an email and password or Microsoft sign-in where your practice uses it, so nobody needs to share a login.
• Admins choose each user's role: admin, desk editor for the desks you pick, or viewer, who can look but not change anything.
• Changes are recorded in the change history: who changed what, and when.

How it's protected

• Encrypted in transit: every connection to the app and the website uses HTTPS.
• Encrypted at rest: data stored in Google Cloud is encrypted by default.
• Sign-in is handled by Google Firebase. Passwords are only ever stored in scrambled form by Google, never by us.
• The website and the app are served through Cloudflare.

Your data is yours

• Export any tool to Excel at any time, and download a full backup of your practice from Settings.
• If you decide to leave, you can export everything before you cancel. If you don't renew, the app goes read only at the end of your year, so you can still download it all.
• We delete your practice's data when you ask us to. Otherwise it is deleted 90 days after your plan ends, as set out in our terms.
• For your clients' data, your practice is the controller and we act as your processor, under our data processing terms.

Our website

• Visitor statistics are cookie-free (Cloudflare Web Analytics). The website sets no tracking or advertising cookies.
• Forms on the website, such as Book a demo and the founding member list, are sent via Formspree to hello@thefinancedesk.co.uk.
• Fonts load from Google Fonts. Our privacy notice has the detail.

Supplier questionnaires