Infrastructure and Hosting
The Service runs on managed, EU-based cloud infrastructure operated by established providers. Data is stored in the European Union. Our providers maintain physical and environmental security for their data centres and hold recognised industry certifications.
We separate customer accounts logically so that each business can access only its own data, enforced at the application and database layers.
Encryption
Data is encrypted in transit using TLS between your browser and the Service. Data at rest — including your database records and uploaded files — is encrypted by our hosting provider using industry-standard algorithms.
Access Control
Access to production systems is limited to authorised personnel on a need-to-know basis and protected by strong authentication. Within your account, role-based permissions let you control what each staff member can see and do.
You are responsible for keeping your own credentials confidential and for managing the access you grant to your staff. We recommend strong, unique passwords for every account.
Payment Security
Payments are processed by Stripe and PayPal, which are certified to PCI-DSS, the payment-card industry’s highest security standard. Full card numbers are handled directly by these processors and are never stored on Hathor’s servers.
Backups and Resilience
Our hosting provider performs regular automated backups of the database, enabling recovery in the event of data loss. We monitor the Service for availability and errors so we can respond to issues quickly.
Responsible Disclosure
We welcome reports from security researchers. If you believe you have found a vulnerability in the Service, please contact support@hatthor.online with the details so we can investigate and address it. Please give us a reasonable opportunity to respond before any public disclosure, and do not access or modify data that is not your own.
No online service can guarantee absolute security, but we work continuously to protect the Service and to improve our controls over time.