Infrastructure
- Hosted on DigitalOcean cloud infrastructure
- Managed PostgreSQL database
- Automatic backups for recovery
- HTTPS enforced across the platform
- TLS 1.2+ encryption for web traffic
Data Security
- Encryption in transit with TLS 1.2+
- Provider-managed encryption at rest
- Role-based access controls
- Secure authentication and session handling
- Isolated tenant data model
Payment Security
- Payments are processed by Stripe
- Stripe is PCI DSS Level 1 certified
- ClippingCash never stores credit card numbers
- Payment details are entered through Stripe secure forms
Payments are securely processed through Stripe, a PCI-compliant payment processor used by millions of businesses worldwide.
Platform Security Practices
- Code reviews before changes are merged
- Dependency vulnerability monitoring
- Secure development practices
- Application logging and monitoring
Account Security
- Role-based permissions
- Activity logs for key account actions
- Secure login system
Your Data
- You own your data
- Your data is never sold
- Everything is deleted when an account is erased
- Backups roll off within about 6 months
Trusted Providers
- Stripe: payments and payouts
- DigitalOcean: hosting and file storage
- Cloudflare: secure connections and DNS
- Telnyx: text messages
- Resend: email
- Mapbox and Google Maps: addresses and maps
- Firebase (Google): app notifications
- QuickBooks and Xero: only if you connect them
See our privacy policy for what each provider receives.
Responsible Disclosure
If you discover a security issue, please report it responsibly.