How we protect your data

Sensitive fields are stored encrypted with AES-256, the same standard used by banks and governments. Someone reaching our database directly would see only scrambled text.

• Bank account numbers and routing information
• Tax identification numbers
• Contact information (emails, phone numbers)
• Addresses
• Payment details

Every page is served over HTTPS (TLS 1.2/1.3), with no exceptions. Data cannot be read while it travels between your device and our servers.

Passwords are never stored in readable form: they are hashed with BCrypt. Weak, common or previously leaked passwords are rejected, and repeated failed attempts lock the account for a while.

Every account uses a second factor: a code sent by email, or an authenticator app if you enable it, with one-time recovery codes. Trusted devices can be remembered for 30 days.

Each business has its own isolated space. Every database query is limited to your own data, and roles (owner, admin, manager, user) control who sees what inside your team. Your accountant only sees what you give access to.

BizHelperSuite never asks for your bank login. You decide what goes into the system, and nothing is pulled from your bank behind your back.

Login attempts and security events are logged, suspicious activity triggers alerts, and security updates are applied continuously.

You can view, export and delete your data at any time. Our practices align with GDPR and OWASP guidelines.