# Security and privacy

> Built to protect creator and payment data. StrideHQ handles identity, tax and
> payment data for creators and the teams that pay them, so we protect it at
> every step.

## Security
- Encryption: data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Bank details and integration credentials are also encrypted field by field.
- Access control: multi-factor authentication is required at every sign-in, and role-based permissions decide what each person can see and do.
- Approvals and audit trail: you can require a different person to approve a payment run from the one who prepared it. Every action is written to an audit log with a timestamp, and log entries can't be edited or deleted.

## Works with the tools you already use
Xero, QuickBooks, HubSpot, monday.com, Zapier, Excel, DocuSign and PandaDoc.

## Data privacy and protection
- Data protection: we process personal data under UK GDPR. Our [Data Processing Agreement](https://stridehq.ai/dpa.md) sets out how.
- Data storage: platform data is hosted in the UK on Amazon Web Services (AWS).
- [Privacy Policy](https://stridehq.ai/privacy.md): how we collect, use and protect personal data.

Questions about security? [Talk to us](https://stridehq.ai/contact.md).