Security

Built to keep your shop's data safe.

Encryption, audited access, encrypted backups, and a responsible disclosure policy. Your business runs through us. We take that seriously.

Encryption

TLS in transit. Encryption at rest. Backup archives are encrypted before they leave the server. Per-tenant data isolation enforced at the database row level.

Access control

Role based access (owner, sales, designer, production, finance). Deactivating a staff member kills their sessions and API access immediately.

Audit logs

Every record change writes to an append-only activity log, exportable as CSV any time.

SOC 2

SOC 2 readiness work is underway. We will share reports under NDA once they are issued, and we will not claim the badge before then.

Backups

Nightly encrypted backups of the database and uploaded files, monitored for freshness, with regular restore tests.

Hosting

Hosted in a single Sydney region today. Additional hosting regions are on the roadmap, and we will list them here when they are live.

Responsible disclosure

Found something? Tell us.

If you've found a security vulnerability in the Printer's Friend platform, please email security@printersfriend.com. We respond within 24 hours and won't pursue legal action against good-faith researchers.

Don't test against customer workspaces. Email us first and we'll set you up with a test account.
Don't pivot, exfiltrate or destroy data. Stop at proof of vulnerability.
Don't publicly disclose until we've shipped a fix or 90 days have passed.
We reward meaningful reports at our discretion, scaled to severity.

We use cookies to make Printer's Friend work. Essential cookies keep the site running. With your consent, we also use analytics and marketing cookies to understand which pages help print shops and which fall flat. See our cookies policy.