Skip to main content
Biz360

How your business data is protected

What gets said during a sales call is worth writing down. Below is what is in place, and how to tell us if you find a problem.

Your data stays yours.

Where is the data hosted?
Biz360 runs on cloud hosting. The exact region and any on-premise option are confirmed in writing before your setup begins.
Who owns the data?
Your business owns its own data and can export it at any time. If you leave, you take your data with you.
How are backups handled?
Automated backups run on a fixed schedule. The exact frequency and retention period are stated in your agreement, not implied.
Who can see what?
Access is role-based, per user and per branch. A counter operator does not see accounts; a branch manager does not see another branch.
What can the AI assistant see?
The assistant answers from your business data within the asking user's own permissions. Ask us to demonstrate this on your own account during the demo.

Accounts, vouchers and financial reports support your accountant's workflow. Local tax and statutory compliance should be verified for your business.

  • Transport and storage

    • Every connection is HTTPS, with HSTS enabled and old TLS versions disabled
    • Passwords are never stored in plain text; a strong hash is used
    • Database backups are held encrypted

  • Access control

    • Role-based permissions, set separately for each screen and report
    • An audit log for significant actions, showing who changed what and when
    • Idle sessions close themselves after a set period

  • Backup and continuity

    • Automatic daily backups with point-in-time copies retained
    • Restore drills are run regularly
    • On an on-premise setup the backup configuration is handed over to you

  • On this website

    • A strict Content Security Policy with a fresh nonce on every request
    • Server-side validation, rate limiting and origin checks on the form
    • No advertising or tracking scripts, so no third-party code runs

If you find a vulnerability

If you notice a security weakness, please write to us directly at biz.webs.25@gmail.com rather than disclosing it publicly. Putting Security in the subject line gets it seen quickly. We normally acknowledge within two working days and keep you updated on the fix.

We take no legal action against researchers reporting in good faith, provided they do not access customer data, do not disrupt the service, and do not disclose the issue before it is fixed.