Security at SavvyHost
Your booking data, customer records, and payment details sit in a database that belongs to your agency alone, behind encrypted connections, with card data handled by the payment processor.
Data Encryption
Connections are encrypted in transit. Application data is encrypted with AES-256. Card numbers are never stored on our servers; the payment processor holds them.
A Database per Agency
Every agency runs on its own database. There are no shared tables between agencies.
Strong Authentication
Two-factor authentication, role-based access control, and session timeout are available on every account.
Data Export and Deletion
You can export your data at any time and request deletion. You own your content and your customer records.
Role-Based Access
Granular permissions let you control who sees what. Activity logs record administrative actions across your organization.
Backups
Automated backups run on a schedule, with incremental copies during the day, stored off the application server.
Cloud Infrastructure
Cloud hosting with a separate database per agency
Your Privacy Matters
We are committed to protecting your privacy and ensuring full control over your data.
- ✓Data minimization — we only collect what's necessary
- ✓No selling of personal data to third parties
- ✓Right to access, correct, and delete your data
- ✓Transparent data processing with clear consent
Report a Vulnerability
If you discover a security vulnerability, please report it responsibly. We appreciate security researchers who help keep our platform safe.
security@savvyhost.net