How we keep your business safe

shoutME Business is new, so here is what's true about how it's built today, plainly stated, and what comes next.

True today

  1. Two-step sign-in for every accountEvery account signs in with its password and a code from an authenticator app on the person's phone, so a leaked password alone opens nothing. A reset needs that code too, not just the email. Passwords known from data breaches are refused, and every new device that signs in is emailed to you.
  2. Confirm it's you for what mattersChanging roles and who's on your team, exports, switching devices off and billing ask for the code again if it's been more than 15 minutes, so a computer left signed in can't be used for them. Owners are emailed when someone is given the run of the business or a device is paired. You can also make your team's sign-ins end after a set time.
  3. Counter devices that can't be copiedYour registers are paired to your business and prove themselves on every request with a key that never leaves the device, so copying one gets nothing. They're never anyone's login, and a lost one is switched off at once.
  4. Every request is checkedOrders, customers, files and settings are checked against who owns them and who may see them on every request, not just hidden in the interface.
  5. Your team, each with their own roleEveryone works as themselves, on their own account or with their own PIN on your business's devices, and their role at each location decides what they can see and change. No shared logins.
  6. One careful path for filesEvery photo, video and document goes through the same checked, processed upload path. No part of the platform takes files its own way.
  7. Encrypted on the wayEverything between your devices and shoutME travels over HTTPS.
Next

Formal audits and certifications come as we grow. Have a specific security question? Ask us and we'll answer directly, not with a canned reply.

Ask a security question