Security Overview

In short: A named owner and a yearly risk review.

Sunwell maintains a risk-based security program suited to the services and the data involved, with a named owner, at least annual risk review and review after major changes.

In short: Least privilege, two-step sign-in, no shared passwords.

• Least privilege, unique accounts and prompt removal of access when someone leaves.
• Everyone with admin access uses multi-factor sign-in on our hosting, database, source code, payment and email accounts.
• Customer data is separated by account. One customer's records are never copied into another customer's workspace.
• No shared staff passwords. Service keys are kept in the protected environment settings of our providers, never in code, and rotated after any suspected exposure.

In short: Encrypted connections; secrets kept out of code.

Data is encrypted in transit over public networks and stored with providers that encrypt data at rest. Keys and secrets are kept out of source code, tickets, chat and logs.

In short: Reviewed, tested changes that can be rolled back.

Changes are reviewed, tested and released through a controlled process with the ability to roll back. Production customer data is not used for development or testing.

In short: Logged admin actions and provider-managed backups.

Security-relevant sign-in, admin and export activity is logged and access to logs is restricted. Backups are kept by our database provider with the same protections as live data.

In short: A response plan and notice within 72 hours where practicable.

We keep an incident response plan. After confirming an incident that materially affects your data or services, we notify you without undue delay, and within 72 hours where reasonably practicable, then follow up with scope, impact, remediation and a root-cause summary.

In short: No public AI on your data; vendors reviewed.

We do not submit your data to public or model-training AI systems. Any AI feature that processes customer data will be listed and described before it is turned on. We review the security of providers that handle customer data.