How ZyroBooks protects your accounting data
Your financial data is highly sensitive. Here is what we do today: encrypted connections, encrypted credentials, role-based access and daily backups.
🔒 Encryption
- TLS 1.2 or newer (TLS 1.3 where supported) for all data in transit
- HTTPS/TLS encryption in transit, with API keys and credentials stored encrypted
- Database, uploaded files and certificates are stored on an AES-256 encrypted disk
- Strict HTTPS enforcement across the platform
- Optional two-step sign-in with an authenticator app
🛡️ Compliance & Privacy
- Designed around UK GDPR principles: access, export and deletion on request
- Your data is never sold. Optional AI features send data only to the AI provider whose key you enter
- Your financial data is never used to train AI models
☁️ Infrastructure
- Automatic health checks every 2 minutes
- Cloudflare WAF and DDoS protection
- Automated daily backups, with an encrypted copy stored off the server
🚨 Report a security issue
- Found a vulnerability or think your data was exposed? Email hello@zyrobooks.uk with the subject "Security issue".
- We act on security reports as a priority and tell you what we find.
- If a breach affects customer data, we notify the affected customers, the UK Information Commissioner's Office where required, and HMRC where HMRC data is involved, within 72 hours of becoming aware of it.