Security

We take security very seriously.

Company Security

Every employee undergoes background checks

Application Security

  • Admin and approver user roles control access
  • Single-sign-on (SSO) with Xero, Intuit or Sage
  • Multi-Factor-Authentication (MFA)
  • Strong passwords enforced
  • Auditable access logs

Infrastructure Security

  • Infrastructure is hosted in AWS Europe
  • Data encrypted in transit and at rest
  • Regular penetration testing

Vulnerability disclosure

We investigate all reported vulnerabilities. If you think you have discovered a problem, please contact us at security@nook.io