Security and trust
What we do to protect your business's data and your clients' details, in plain words, and what we do not claim.
Each business's data is kept apart
The database itself separates every business's records with row-level security, and automated tests check that no business can read another's data.
Card numbers never reach our servers
Card entry is hosted by Stripe, online and on card readers, so card numbers go to Stripe and never to us. Each business confirms its own card-security compliance with Stripe.
Two-step sign-in for every staff account
Everyone on your team signs in with a password and an authenticator app. Refunds over your limit, exports, team changes and similar actions ask for the second step again.
Sensitive client details are encrypted
Health-related form answers, allergy notes and client photos are encrypted at rest, shown only to staff you allow, and every view is logged.
A record of who changed what
Changes to bookings, money, settings and your team are recorded with who made them and when, and owners can review the activity log.
Encrypted backups, tested restores
Backups are encrypted, and we rehearse restoring them so we know recovery works.
Export any time
Owners can export their data whenever they like, in every billing state, and for 90 days after closing the account.
We never sign in as you
Our staff cannot sign in as you or your team. When we help with your account, the action is recorded with a reason.
No advertising, analytics or AI vendors
No advertising, analytics, session-recording or AI provider receives your business's or your clients' data.
Protection against abuse
Public forms carry a bot check, and sign-in, codes and other sensitive actions are rate limited.
What we do not claim
- Regulars Desk is not a HIPAA product and does not sign business associate agreements. It is not for clinical or medical-spa use.
- We do not offer an uptime commitment during our early-access period.
- We do not hold SOC 2 or other independent certifications today.
Reporting a security problem
If you think you've found a security problem, email info@regularsdesk.com. Please give us a chance to fix it before you tell anyone else.