Security
Secure by design, honest about it.
How the infrastructure and the systems we build are protected, with platform credentials kept separate from Hynesense company claims.
The platform we build on
Built and hosted on infrastructure that is independently certified to ISO 27001:2022.
Our platform is independently audited to SOC 2 Type II.
Our platform is GDPR compliant and operates under a Data Processing Agreement.
Web application firewall, network isolation, encrypted data storage, adaptive rate limiting, and automated security scanning every time a system is published.
Hynesense the company
Pending Gareth's confirmationThis compliance statement is awaiting Gareth's confirmation and is not currently published as a claim.
Pending Gareth's confirmationThis standards statement is awaiting Gareth's confirmation and is not currently published as a claim.
Secure build
How we protect every system
- Every database table is protected by row-level security, so users only ever see the records they are entitled to.
- Roles and permissions are stored and enforced on the server, never trusted from the browser.
- Connections to accounting and banking systems use the provider's official secure API with OAuth consent, the minimum permissions needed, and tokens stored encrypted on the server.
- AI never moves money or sends anything external without a named person approving it. Every approval is logged.
- API keys and credentials are held in encrypted backend secrets, never in the app code.
- Encryption in transit and at rest. Multi-factor authentication available on every portal.
- Full audit trail of who did what and when. Regular backups.
- Pending written confirmationThe AI training position is awaiting written confirmation and is not published as a claim.
- Data processing agreement and non-disclosure agreement signed before we touch client data.
- Independent penetration testing available on request for any system we build.
A full list of sub-processors is available on request under a confidentiality agreement.
Ask us anything
Questions about security?
Ask us how a system will handle your information, access and approvals before any work begins.
Contact HynesenseReady when you are