Trust & Security

ClippingCash protects business data using secure infrastructure and modern security practices designed for everyday operations.

Infrastructure

  • Hosted on DigitalOcean cloud infrastructure
  • Managed PostgreSQL database
  • Automatic backups for recovery
  • HTTPS enforced across the platform
  • TLS 1.2+ encryption for web traffic

Data Security

  • Encryption in transit with TLS 1.2+
  • Provider-managed encryption at rest
  • Role-based access controls
  • Secure authentication and session handling
  • Isolated tenant data model

Payment Security

  • Payments are processed by Stripe
  • Stripe is PCI DSS Level 1 certified
  • ClippingCash never stores credit card numbers
  • Payment details are entered through Stripe secure forms

Payments are securely processed through Stripe, a PCI-compliant payment processor used by millions of businesses worldwide.

Platform Security Practices

  • Code reviews before changes are merged
  • Dependency vulnerability monitoring
  • Secure development practices
  • Application logging and monitoring

Account Security

  • Role-based permissions
  • Activity logs for key account actions
  • Secure login system

Your Data

  • You own your data
  • Your data is never sold
  • Data is removed after account deletion
  • Temporary backups are retained for recovery

Trusted Providers

  • Stripe
  • DigitalOcean
  • Mapbox
  • Resend

Responsible Disclosure

If you discover a security issue, please report it responsibly.