Trust Portal
Outside services
The kinds of outside service that touch member data, what each one is given, and when.
What each kind is given
| Service | What it is given | When |
|---|---|---|
| Taking payment | The card and the payment, which it holds. We keep its reference for your account and your plan. We do not store card numbers. | When a plan is paid for. |
| Sending email | The address it is sent to and the mail itself: confirmations, alerts and digests, invitations, password resets and the newsletter. | When there is mail to send. |
| AI readings | The question and the facts on the screen it is about. Where an account has turned on AI writing in a proposal draft, one press sends the requirement sentences of that part, the passages of its own documents shown under them, and its company name. An account that adds an AI key of its own sends its readings with that key. | Only when somebody asks. |
| The accounting product an account connects: QuickBooks Online | The journal entries somebody on the account sends to its own company there: a month's labor distribution and costs, by account, with the contract names in their descriptions. And a request for that company's chart of accounts, so the accounts can be picked. | Only when somebody on the account connects it, sends a month or reads the chart of accounts. |
| Keeping the second copy of the nightly backup | The locked backup file and its seal. Never the passphrase. | Every night. |
The companies we use
We have not named them on this page yet. Ask for our security questionnaire and we will name each one.
The rest of the Trust Portal
- Trust PortalWhat is true today, in one list.
- How data is keptWhere documents sit, who can read them, and what goes to an AI model.
- Access controlRoles, two-step sign-in, sessions and the account history.
- Backups and their encryptionWhat the nightly copy holds and how it is locked.
- Incident responseWhat we do when member data may have been reached.
- Vulnerability disclosureHow to report a weakness, and what is in scope.
- Security questionnaireAsk for it, under a non-disclosure agreement.
- Security and privacyThe whole of what is stored, in one page.