Security
Who runs TidyAcc. TidyAcc is run by its founding team in Singapore. Our company registration is in progress — we will add the registered company name and UEN here as soon as it is complete.
At a glance
Each company’s records are kept separate, connections are encrypted, and backups run every night. Report any concern to admin@tidyacc.com.
1. How we protect your records
- Every connection to TidyAcc is encrypted (HTTPS).
- Each company’s records are kept separate at the database level, so one company cannot see another’s.
- Passwords are stored only as secure hashes (Argon2). We cannot see your password.
- Two-step sign-in is available, and a company’s Boss can make it compulsory for staff.
- Sign-in pages are protected against bots, and every sign-in is recorded in your company’s Activity log.
- Bank details are encrypted when stored.
- Our server is firewalled, has security updates installed automatically, and is checked every 15 minutes.
2. Backups
We take an encrypted backup every night and test restoring it every week. We are adding a second copy away from the main server.
3. What you can do
- Use a strong password, and turn on two-step sign-in.
- Give staff and accountants only the access they need.
- Remove people who leave.
- Check bank and payment details on documents before you send them.
4. Report a security issue
Email admin@tidyacc.com with the subject “Security”. Tell us what you found and how to see it. Please do not access other companies’ data or disrupt the service while checking. We will look into every report and keep you updated.
Questions? Email admin@tidyacc.com or WhatsApp +65 8571 1832. Please never send passwords or sign-in codes by email or WhatsApp.