Security and trust

How we protect your data

Your company's records in Zyntra OS are yours. This is how we keep them safe.

What keeps your data safe

Each company sees only its own data

Each company sees only its own records, and each person sees only what their rights allow. Automatic tests sign in as different people and knock on every door of the system to check it.

A safer sign-in

Two-step sign-in can be turned on for each person: after the password, a code sent by email. After several wrong passwords, more tries are refused for a while. Your team can also sign in with their Microsoft or Google account, once your company sets it up.

Protected servers

Our servers sit behind a protective network that filters traffic before it reaches them. Only the connections the service needs are let in, and security updates are installed automatically.

A backup every night

Every night an encrypted copy of the data is made, and a second copy is kept on a separate server. Every week, the backups are restored into a test copy and checked automatically.

Encrypted

Every connection to Zyntra OS is encrypted. Passwords are kept only in a one-way scrambled form, and keys, the passwords of connected accounts and sensitive personal details such as bank account and ID numbers are encrypted in the database.

Checked all the time

We review the security of every part of the system, one area after another. Before every update, the building blocks the system is made of are checked against the published lists of known weaknesses.

Your privacy

Your data is yours. Zyntra OS records the consent people give, and a person can ask to see their data, take a copy of it, or have it removed. We built it with privacy laws such as the GDPR in mind.

Report a security issue

If you think you have found a security issue in Zyntra OS or on this website, write to us at [email protected]. We read every report and answer it. Please give us time to fix an issue before you tell others about it — and thank you for reporting it responsibly.

The same address is in the security.txt file at the root of this website, where the standard for reporting security issues expects it.

Write to [email protected]