Your shop's data, kept safe
Kept in Sydney, walled off from every other shop, encrypted, and backed up every day.
Where your data lives
- Kept in Australia
- Your shop's data is stored on Amazon Web Services in Sydney.
- Backed up every day
- Daily backups of the database and files are copied to Melbourne and kept for 35 days, so one city having a bad day doesn't lose your work.
- Two copies running
- The database runs in two separate Sydney data centres at once. If one fails, the other takes over.
- Files you can get back
- Uploaded artwork and documents keep earlier versions, so a file replaced by mistake can be restored.
Walled off from other shops
- Separated in the database
- Every row of shop data is tagged with its shop, and the database itself refuses to show it to any other shop. It doesn't rely on the app remembering to check.
- Tested on every change
- Automatic tests try to read one shop's data as another before every release, and the release stops if they can.
- Customer links
- Quote, proof, portal and store links use long random codes. Only a scrambled copy of each code is stored.
Encrypted
- In transit
- Every page and link uses HTTPS.
- At rest
- The database, backups and files are encrypted with keys held in Amazon's key service.
- Keys and passwords
- Connections to Xero, MYOB and QuickBooks are sealed with their own encryption, tied to your shop. Our own keys live in a secrets vault, never in code, and your API keys are only stored scrambled.
Signing in
- Two-step sign-in
- A code from an app on your phone. Owners and admins must use it; everyone else can turn it on.
- Strong passwords
- At least 10 characters, and sign-in attempts are limited to stop guessing.
- The right access for each person
- Owners, admins, sales, artists and production each see what their role allows, and an owner can add or take away single permissions for one person. Everything is checked on the server for every action. Production staff never see prices or costs.
- An activity log
- Important changes are recorded with who made them and when.
Protecting the site
- A firewall in front
- Common attacks and floods of requests are blocked before they reach the app.
- Private network
- The database has no route to the internet. Only the app's own servers can reach it.
- AI kept in Australia
- AI help runs in Australia on Amazon Bedrock. What you send isn't kept by the AI or used to train it, and you can switch it off.
Found a problem?
If you think you've found a security problem, email support@halftonik.com with the details and we'll reply within two business days. Please don't test against other shops' accounts.
Read how we handle personal information in our privacy policy.
Try it on your next job
Set up your prices, send a real quote and see how it feels. It takes minutes, not weeks.