Security
How we protectyour data.
Your procurement and IT teams will ask. Here is every measure we take, and the conditions we hold ourselves to before any of your data is hosted.
In place
Built and working in the product today.
- Your data kept apart
- Every record carries its organisation, and the database itself refuses to show it to anyone else.
- Least-privilege access
- The application connects with a restricted database role, never an administrator account.
- No passwords to steal
- You sign in with a one-time email link, your Google account or your company’s single sign-on. We store no passwords.
- Two-step sign-in
- Anyone can add an authenticator app, and an organisation can require it of every admin. Deleting an organisation needs it.
- Sessions you control
- See every device you’re signed in on and sign any of them out. Your organisation can shorten how long sessions last, down to an hour.
- A log nobody can quietly change
- Every change is recorded with a fingerprint of the entry before it, so an edited or missing entry shows. Check it any time, export it, or have it sent to your own monitoring as it happens.
- Keys that only do one thing
- API tokens only read, only what their scopes allow, and always expire. Site keys only push one site’s readings. We store neither in a form that can be used.
- Signed webhooks
- Every event we send is signed, so your systems can reject anything that isn’t from us, and we refuse to send to private network addresses.
- Limits on every door
- Sign-in attempts, uploads, pushes and API requests are rate-limited, so guessing and flooding get nowhere.
- Your data, out or gone
- Export everything at any time in open formats. Delete your organisation from Settings and it’s gone 30 days later, files included, with every admin told first and able to stop it.
- Pilot files stay off our servers
- During a pilot your readings are processed locally under a signed agreement; only the report comes back.
Before we host your data
Conditions we hold ourselves to: no customer data goes on our servers without every one of these.
- Encryption everywhere
- Encrypted connections, encrypted storage, encrypted backups.
- Safe file uploads
- Type and size limits and malware scanning on uploads; spreadsheet formulas neutralised in every export.
- Secrets and dependencies
- No secrets in our code. Every build checked for known vulnerabilities in the software we depend on.
- Tested backups
- Backups that we restore regularly, to prove they work.
- Privacy documents
- A privacy notice, data processing terms and a retention policy, reviewed by our lawyer, under the Nigeria Data Protection Act 2023.
Where your data lives
We’ll tell you the hosting country before you sign. If your organisation needs its data kept in Nigeria, ask us. It changes where we host, and we’d rather know on the first call.
We collect as little personal data as we can: your name, work email and role. Our logs record actions, never the contents of your files or your sign-in details.
Report a vulnerability
Found a weakness in Snowleaf? Email security@snowleaf.xyz with what you found, how to reproduce it, and what it could let someone do. We’d rather hear it from you than from anyone else.
- What we do
- Reply within two working days, keep you told as we fix it, and credit you when it’s fixed, if you’d like.
- In scope
- snowleaf.xyz, the Snowleaf app and its API, and anything we publish.
- Please don’t
- Read, change or delete anyone else’s data; slow the service down for others; or try to trick our team or customers. Use your own organisation or the sandbox, and stop as soon as you’ve shown the problem.
- Our promise
- We won’t take action against anyone who follows these rules in good faith and gives us a fair chance to fix the problem before telling others.
Questionnaire from your procurement team? security@snowleaf.xyz
Send us your questionnaire