Security

Your accounts are sensitive. This page explains what we do today to protect them, and we'll keep it up to date as Quidflo grows.

What we do now

Encrypted connections. Quidflo is served over HTTPS, so data sent between your browser and our servers is encrypted in transit.
Passwords are hashed. We never store your password in plain text.
Sign-in required. The application and its data are only available to signed-in users.
Secrets kept out of public files. Configuration and credentials are stored outside the public web folder.
Accounting integrity by design. Money is stored as whole pence to avoid rounding errors, and the ledger is designed so that posted entries cannot be silently changed. Corrections are made with reversing entries.

What we're working on

As Quidflo moves towards launch we plan to add further protections such as two-factor authentication and fuller audit logging. We will describe them here once they exist, not before.

Reporting a problem

If you believe you've found a security issue, please email [email protected] with "Security" in the subject line. Please give us a reasonable chance to fix it before sharing it publicly.