Security

Data protection measures

• All traffic is encrypted in transit using TLS.
• Estate data and uploaded documents are encrypted at rest.
• Access to each estate workspace is restricted to the account that created it and anyone that account explicitly invites.
• Passwords are hashed; we never store them in readable form.
• Optional two-factor authentication on accounts.
• Key actions are recorded in an audit log with a timestamp.

Payments

Card details are handled entirely by our payment provider. Card numbers never reach our servers.

Backups and continuity

Data is backed up regularly so that a workspace can be restored after a technical failure. You can also export your estate record at any time.

Reporting a vulnerability

If you believe you have found a security issue, email help@applyforprobateonline.co.uk with the details. Please do not publish it before we have had a chance to respond.