Security and compliance
How Upkilo protects your business's data and your clients' — and the standards we can show evidence for.
How your data is protected
Two-factor sign-in
Any account can require a second step at sign-in: a code from an authenticator app such as Google Authenticator or 1Password, or one sent by email.
Sign-in protection
Five failed sign-ins lock an account for 15 minutes and email its owner. You can see every signed-in device and sign any of them out.
Role-based access
Give each team member only the access their role needs, with custom roles when the built-in ones do not fit.
Audit log
Every change to your business's records is logged with who made it and when. Owners can review and export the log.
Export and deletion
Export your data whenever you want it, and request deletion of an account and the personal data held about it.
Card details stay with the processor
Cards are entered on Stripe's or Razorpay's own checkout, so card numbers never reach Upkilo's servers.
Security reviews and agreements
Need a security questionnaire answered, a data processing agreement, or a Business Associate Agreement before you sign up? Tell us what your review needs.