Security & Data Privacy
Your team's data is yours. We treat it with the same care we'd want for our own.
Encryption at rest & in transit
All data is encrypted using AES-256 at rest and TLS 1.2+ in transit. No exceptions.
ISO 27001-certified hosting
TaskSpread runs on cloud infrastructure certified to ISO 27001. EU/UK data residency by default.
Role-based access control
Granular permissions ensure users only see what they need. Admin audit logs track all sensitive actions.
SSO / SAML (Enterprise)
Integrate with your identity provider for centralised authentication and single sign-on.
Regular security reviews
We conduct quarterly internal security reviews and annual third-party penetration tests.
Daily backups
Your data is backed up daily with point-in-time recovery. 30-day retention on all plans.
Vulnerability disclosure
Found a security issue? Please report it responsibly to [email protected]. We investigate all reports and respond within 48 hours.