Security at PakdaaSecurity at Pakdaa

Security is part of how we design and build every Pakdaa product, not something added at the end. The products you use to capture enquiries, manage work and run your business need to be dependable, and that starts with protecting your data.

Our approach is simple:

• Collect only the information a product needs.
• Keep each workspace's data separate.
• Limit who can access what.
• Protect data in transit and at rest.
• Keep a record of important activity.

No system is perfectly secure, so we keep reviewing and improving our safeguards as our products grow.

Pakdaa products are built so that data belongs to a workspace, and stays there.

• Workspace separation. Each workspace's data is kept separate from every other workspace.
• Client separation. Teams and agencies can keep work for different clients apart, so each client sees only what belongs to them, not your whole workspace.
• Test & live separation. Test data is kept apart from live data, so trying things out never mixes with real submissions.

People should have access to what they need, and nothing more.

• Team roles and controlled permissions. Workspace owners decide who can view, edit or manage each part of their workspace.
• Client access. Give clients access to the work that belongs to them, without exposing anything else.
• Internal access. Access to customer data within Pakdaa is limited to authorised people, and only when it's needed to provide support or keep the service running.

We recommend using a strong, unique password and removing access for anyone who no longer needs it.

Your data is protected with industry-standard encryption in transit and at rest.

Files are shared through secure, time-limited links, so a link to a file can't be used indefinitely. Sensitive credentials, such as keys for connected tools, are handled using established security practices.

Important actions are recorded in an audit trail, so workspace owners can see who did what, and when. It helps teams review changes, understand what happened if something goes wrong, and stay accountable.

We also monitor our systems for unusual activity and investigate anything that looks out of place.

Pakdaa runs on established cloud infrastructure, with physical security of data centres managed by our hosting providers. On top of that, we:

• Back up data regularly to help recover from failures.
• Monitor our services so we can respond quickly to issues.
• Keep software and dependencies up to date and apply security updates.
• Review changes before they reach production.

If you believe you've found a security vulnerability in any Pakdaa website or product, we'd like to hear from you. Please email info@pakdaa.com with “Security” in the subject line, and include:

• A description of the issue and where you found it.
• Steps to reproduce it, and any proof of concept.
• The potential impact, as you understand it.

While you investigate, please:

• Give us reasonable time to look into and fix the issue before sharing it publicly.
• Don't access, change or delete data that doesn't belong to you.
• Avoid anything that could disrupt our services or affect other users' privacy.

We'll acknowledge your report, keep you updated on our progress, and let you know when the issue is resolved. Thank you for helping keep Pakdaa and the people who use it safe. For anything else, visit our contact page.