What we do today
- All traffic between you and AUZslab is encrypted (HTTPS).
- Passwords are hashed, never stored in plain text; staff PIN logins are protected the same way.
- Two-factor authentication is available for owner and manager accounts.
- Access to your business data is restricted by role (owner, manager, staff) within your own account, and every business's data is kept separate from every other business's.
- Rate-limiting and account-lockout protections guard against automated attacks on logins.
- You can sign out a single lost or stolen device without changing your password.
- We take regular backups and are investing in off-site backup and server failover infrastructure.
- We monitor for errors and security issues using an error-monitoring service.
What we don't claim
No system is 100% secure, and we don't claim ISO or SOC-style certification. We are not liable for a security incident caused by your own password or device practices, a lost staff login, or a third-party service outage beyond our reasonable control.
If you find a vulnerability
Please report it to us at helloauzslab@gmail.com rather than exploiting or publicly disclosing it — we'll work with you to fix it. See also our Privacy Policy and Terms & conditions.