Yes. Avaza protects your data with encryption, regular backups and strict limits on who can see it. This page sums up the main measures and the settings you control. Avaza's Security page has more detail.
How Avaza protects your data
- Encryption. Your connection to Avaza is always encrypted, with TLS 1.2 or later. Stored data is encrypted at rest, and the files you upload are stored encrypted.
- Backups. An automated process backs up all data regularly and keeps copies at several backup sites.
- Protection and monitoring. Firewalls, DDoS protection and regular patching of the servers keep intruders out. The infrastructure is actively monitored.
- Availability. Avaza runs on several load-balanced servers with fail-over. It has disaster recovery procedures for server failures, data centre failures and data loss.
- Independent testing. Independent security professionals and firms have carried out penetration tests on Avaza.
- Limited staff access. Only a small number of Avaza staff can be authorised to look at your data, and only when an Admin of your account asks for that kind of help.
- Card payments. When your customers pay invoices online by card, the card details never pass through or get stored on Avaza's servers.
Where is my data stored?
Avaza is hosted on Amazon Web Services (AWS), on servers in North America. Uploaded files and attachments are kept in Amazon S3.
If you work in the EU: the GDPR doesn't require EU personal data to stay in the EU. EU customers can ask Avaza for a data processing agreement (DPA). Avaza's GDPR page explains both.
Keep your own account secure
- Turn on multi-factor authentication, and require it for your team and your external contacts. See multi-factor authentication.
- Control how your team signs in. Team members can sign in with Google, and you can limit them to certain sign-in options in Settings › General. See Google single sign-on and single sign-on and login enforcement.
- Give people only the roles they need. See managing users and contacts.
- If you think someone else has used your login, reset your password, then click Logout All Browser Sessions on your User Profile. It can take up to 3 minutes to sign out every browser. See managing my user profile.
Your data, your control
- Export your data at any time. See how to export data.
- Deleting is permanent, so check before you delete. See can I recover deleted data?.
- Privacy. Avaza's Privacy Policy explains what data Avaza collects and how it's used. The GDPR page explains how to ask for a copy of your personal data, or for it to be deleted.
Security questions? Email support@avaza.com.