Security Built for Compliance Workflows

Access Register is designed to protect sensitive access information with secure authentication, clear auditability, and privacy-first defaults.

Have security requirements? We can share our controls and roadmap.

Security Controls

We provide the following controls to protect your account and data.

Two-Factor Authentication

Support for 2FA to protect accounts from credential theft.

Session Management

Manage active sessions and sign out remotely to reduce exposure.

Role-Based Access

Restrict access based on assigned roles and permissions.

Audit Logging

Key actions are recorded with actor, subject, timestamp, and metadata.

Secure Billing via Stripe

Billing is handled by Stripe. We do not store card details.

Data Handling & Privacy

We store systems, people, access roles, and review history. This data is sensitive and should be treated with appropriate care.

Sensitive by Design

Access registers include privileged information. We design features assuming this data is sensitive.

Export Handling

Audit pack PDFs should be stored and shared like sensitive documents.

Payment Data

Card payments are processed by Stripe. We store only Stripe identifiers required for billing.

Auditability for Cyber Insurance and Reviews

Evidence and accountability for insurers and auditors.

Review Sign-Off Records

Each review captures reviewer identity, timestamps, and notes.

Complete Review History

Keep a structured record of review cadence and outcomes.

Audit Log Filters

Search by action type, subject, actor, and date range.

Exportable Audit Packs

Generate a PDF pack for insurers and auditors.

Customer Best Practices

We recommend the following to strengthen security on your side.

✓ Use unique passwords and 2FA for all users
✓ Limit access to authorised personnel only
✓ Review access when staff change roles or leave
✓ Treat exports as sensitive documents

Security FAQ

Do you store credit card details?: No. Payments are handled by Stripe. We store Stripe customer and subscription identifiers only.
Do you support two-factor authentication?: Yes. We support two-factor authentication to protect accounts from credential theft.
Who can see our data?: Access is controlled via roles and permissions. Only authorised users in your account can access your records. Platform admins do not access customer data except where required for support and operations.
Can we export our data?: Yes. Audit packs are exportable as PDFs. Treat exports as sensitive documents.
How does this help with cyber insurance?: It provides evidence of regular access reviews, sign-offs, and a structured record you can share with insurers.