Security Overview

At Sitefully Limited, protecting your data is a core part of how we build and operate Sitefully CRM. This page provides a high-level overview of the technical and organisational measures we have in place.

How we protect your data

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Payment data is handled by PCI DSS-compliant processors.

Role-based access control (RBAC) ensures employees only access data necessary for their role. The principle of least privilege is enforced across all systems.

All access to personal data and administrative actions are logged with timestamps, user identifiers, and action details. Logs are retained for 6 years for legal compliance.

Strong authentication is required for all staff and user accounts. We support and encourage multi-factor authentication (MFA) for additional security.

We collect and retain only the data necessary for the stated purpose. Sensitive information is redacted from logs and internal systems by design.

We maintain an incident response plan and will notify affected parties and the Data Protection Commission of qualifying breaches within 72 hours as required by GDPR.

Regular automated backups ensure data can be restored in the event of an incident. Backup integrity is tested periodically.

We conduct regular security assessments of our systems and review our security practices to address emerging threats and vulnerabilities.