Security

How Storypole PRO protects your company's data and your customers' data.

Last updated 2 October 2026.

Where it runs

Storypole PRO runs on Cloudflare's global network: the application, database and file storage are all Cloudflare services, with Cloudflare's network protection in front of them. Data is held in the United States.

Encryption

• Every connection uses HTTPS (TLS).
• Data in the database and file storage is encrypted at rest.
• Links sent to customers, subs and suppliers carry long random tokens and show only the item they were sent for.

Sign-in and access

• Sign-in is handled by Clerk, a dedicated sign-in and account-security provider. We never see or store your password.
• Each company's data is kept separate; every request is checked against the company it belongs to.
• Roles — owner, admin, office, project manager, accountant, field and read-only — limit what each user can see and do. Owners can switch a user off at once.
• API keys can be read-only, are shown once, are stored only in hashed form, and can be turned off at any time.

Payments

Card and bank details are entered on Stripe's pages and go straight to Stripe, a PCI DSS Level 1 service provider. They never touch our servers. Payment webhooks are signature-checked.

Connections and AI

• QuickBooks, Xero and Gusto connect through their own sign-in (OAuth); we never see those passwords, and you can disconnect at any time.
• AI features send only what the feature needs to our AI provider, which does not train on it. Neither do we.

Backups and recovery

The database keeps point-in-time recovery, so it can be restored to an earlier moment if something goes wrong. You can export your data at any time.

Our practices

• Access to production systems is limited to the people who run the service, and keys and passwords are stored separately from the code.
• Changes are tested by an automated suite before they are published.
• If a breach affects your data we will tell you promptly and as the law requires.

Report a security issue

If you believe you have found a security problem, email support@storypolepro.com with “Security” in the subject. Please give us a reasonable time to fix it before telling anyone else, and do not access other people's data or disrupt the service while testing. We appreciate good-faith reports.