The security of your data is our top priority.

Server security

We take the security of your data very seriously and follow best practice procedures to secure our servers, including:

• Use of firewalls to prevent unauthorised access to our network.
• Mandatory TLS encryption of all data going between you and Clear Books.
• Encryption of data at rest.
• Timely installation of software security patches.
• Use of strong passwords and multi-factor authentication.

Physical security and hosting facilities

Clear Books is hosted by Amazon Web Services (AWS) in top grade hosting facilities physically located within the EU. AWS employs robust physical security controls including professional security staff, video surveillance, multi-factor authentication for authorised staff access, with all physical access routinely logged and audited. Clear Books maintains multiple geographically separated data replicas and hosting environments to minimise the risk of data loss or outages.

Security monitoring

The Clear Books team continuously monitors security systems, event logs, notifications and alerts from all systems to identify and manage threats.

Availability of the Service

Clear Books uses multiple redundancy technologies for its hardware, networks, data centres and infrastructure to ensure it maintains uptime of the Service. AWS provides 24x7x365 coverage to detect incidents and to manage the impact and resolution.

Disaster Recovery and backup procedures

Clear Books performs real-time data replication between its geographically diverse, protected facilities, to ensure Your data is available and safely stored. This means that should a worst-case scenario such as entire hosting facility failure take place, Clear Books can quickly switch to a backup site to keep the Service running.

Clear Books takes a backup of all customer data on a nightly basis after midnight.

Clear Books aims to have a minimum of 30 daily backups available at all times for disaster recovery purposes.

Backups are tested regularly to verify our ability to restore data should it be required.

Access to information

Only Clear Books personnel have access to customer data within the servers. AWS does not have access rights to any such data except for the limited purpose of storing the information. At Clear Books, only the minimum number of people necessary have access to this data, and it is restricted to senior engineering personnel.

In some cases it may be necessary to grant access to external vendors for support purposes, however, all access is monitored by senior engineering personnel.

User account security

Clear Books provides you with several features to help keep your data secure, including:

• E-mail alerts for potentially suspicious logins and for security sensitive actions such as your password being changed.
• A viewable log of recent login locations.
• Support for multi-factor authentication using an authenticator app or security keys.
• The ability to require multi-factor authentication for all users of your business.
• Fine grained permissions to restrict what your users can and cannot access.

Vulnerability disclosure

If you believe you have discovered a vulnerability in our systems, we appreciate your help in disclosing it to us in a responsible manner.

Please contact us and provide us with as much detail as possible, including any proof of concept or replication steps.

We do not currently operate a bug bounty programme, and are unable to offer financial compensation, rewards, or merchandise in exchange for vulnerability reports.

While we cannot guarantee a reply, all disclosures are reviewed and acted upon where necessary.

We will not engage with anyone acting in bad faith, for example demanding payment before disclosing a vulnerability or to prevent a public disclosure. Such actions are considered extortion and may be reported to police.