We take security very seriously.
Company Security
Every employee undergoes background checks
Application Security
- Admin and approver user roles control access
- Single-sign-on (SSO) with Xero, Intuit or Sage
- Multi-Factor-Authentication (MFA)
- Strong passwords enforced
- Auditable access logs
Infrastructure Security
- Infrastructure is hosted in AWS Europe
- Data encrypted in transit and at rest
- Regular penetration testing
Vulnerability disclosure
We investigate all reported vulnerabilities. If you think you have discovered a problem, please contact us at security@nook.io