Security at Whip

1. Data Protection & Encryption

• All data transmitted between your device and our servers is encrypted.
• Sensitive information is stored securely and protected against unauthorised access.
• User passwords are encrypted and never stored in plain text.

2. Access Control & User Management

• Role-based access control allows businesses to assign permissions based on staff responsibilities.
• Account owners can manage users and control access to features and data.
• System activity is logged to help track key actions and changes.

3. Infrastructure & Hosting Security

• Our platform is hosted on secure cloud infrastructure with industry-standard security practices.
• Servers are monitored continuously to detect unusual activity or potential threats.
• Network security controls, including firewalls and access restrictions, are in place to reduce exposure.

4. Backups & Data Recovery

• Business data is backed up regularly to prevent data loss.
• Backup systems are designed to support recovery in the event of unexpected incidents.
• Our systems are built to minimise service disruption and downtime.

5. System Maintenance & Updates

• We regularly maintain and update our systems to address potential vulnerabilities.
• Security patches and platform improvements are applied as part of our ongoing operations.
• Our technical team continuously reviews system performance and security as the platform evolves.

6. Incident Management & Response

• In the event of a security or system incident, our team will investigate and respond promptly.
• Our priority is to restore service safely and minimise impact to customers.
• Customers will be notified transparently when an incident materially affects service or data.

7. Shared Responsibility

While we implement strong security measures, customers also play an important role in keeping their accounts secure. We recommend that users:

• Use strong, unique passwords and keep login details confidential.
• Assign appropriate access levels to staff members.
• Log out of accounts when using shared or public devices.