Security

Your business data is yours. We keep it that way.

1pc handles your customers, your invoices, and your decisions. That data deserves serious protection. Here is how we deliver it.

Encrypted everywhere

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Your information is protected whether it is moving or stored.

We never sell your data

Your data is used to run your business on 1pc. Nothing else. No advertising. No third-party data sales. No exceptions.

No AI training on your data

Your business information is never used to train AI models. Our AI provider processes your data under contract with the same commitment.

You control your data

Export your data at any time. Delete your account and we remove your data from active systems within 30 days, backups within 90.

How we protect your data

Authentication

Secure magic link login with support for multi-factor authentication. Passwords are hashed using industry-standard algorithms and never stored in plain text.

Access controls

Internal access to customer data is restricted to authorised personnel on a need-to-know basis. All access is logged and auditable.

Infrastructure

Your data is secured at the database level, ensuring complete isolation from other customers.

Backups

Regular automated backups with tested recovery procedures. Backup data is encrypted and retained for up to 90 days after deletion.

Monitoring

Continuous security monitoring, dependency scanning, and incident response procedures with defined escalation paths.

Compliance

UK GDPR compliant. Data Processing Agreement available. We act as data processor for your customer data and data controller for your account data.

AI and your data

1pc uses AI to help you make better decisions about your business. When you use AI-powered features, relevant context from your business is processed by our AI provider (Anthropic) under a commercial agreement that prohibits the use of your data for model training.

AI suggestions are guidance, not decisions. You review, you decide, you act. The AI works for you, not the other way around.

Security is not a feature we ship. It is a standard we maintain. If you have questions, we have answers.