Security and data protection

Last updated: 11 October 2026

A separate database for your company

Every company gets its own database for each service it subscribes to — Accounting, Warehouse, CRM and HR — instead of one table shared by all customers. Your company's data is never mixed with another company's, and it is not shared between your different services.

Sign-in and permissions

• The site and the systems are served over HTTPS, so data is encrypted in transit.
• Passwords are stored hashed (bcrypt); nobody, including our team, can read them.
• Repeated failed sign-in attempts are temporarily blocked.
• Role-based permissions: each user sees and changes only what their role allows.

Audit trails and sensitive data

• Accounting and HR keep an audit trail of who changed what, and when.
• In HR, national ID, passport and insurance numbers are stored encrypted and are never written to the audit log.
• Employee documents are kept in private (non-public) storage, and every download is logged.

Payments

We do not store card details. Online payment by card or mobile wallet is processed entirely on the secure payment page of the payment provider, Kashier, and bank and wallet transfers happen outside the site.

Your data is yours

We use your company data only to run the service, and we never sell it. You can ask for a copy or for deletion when you leave. Details are in the Privacy Policy.

Reporting a security issue

If you notice a vulnerability or suspicious behaviour, email info@cutme.org.