Authentication
Sign-in methods
- Email and password - passwords must be at least 12 characters
- Google - use your Google account when this option is available
- Apple - use your Apple ID when this option is available
Password security
- Passwords are hashed using a modern adaptive algorithm (scrypt) before storage – we never store plain text passwords
- New passwords are checked against the Have I Been Pwned breach database to prevent use of compromised passwords
- Account lockout triggers after repeated failed login attempts
Two-factor authentication (2FA)
Use an authenticator app for two-factor authentication. Setup provides 10 one-use backup codes; keep them somewhere private and safe. Replacing the set invalidates the old codes. Owners and Admins require two-factor authentication on every plan. Keep your authenticator or an unused backup code available when signing in. There is no 30-day trusted-device bypass. Verification prompts may also use an email code for supported identity checks. This is separate from authenticator-based two-factor sign-in.Data encryption
In transit
- All connections use HTTPS (TLS)
- Database connections use SSL with certificate verification
- Redis connections use TLS
At rest
- Integration credentials (Xero, QuickBooks) are encrypted with AES-128 using a versioned keyring
- OAuth tokens are stored encrypted
- 2FA secrets are stored encrypted
- Personal information (email, name, phone) uses a dedicated encryption key separate from other data
- API keys are stored as one-way hashes – the plaintext key is shown only once when generated
Data isolation
Every query is scoped by your account. Your data is completely isolated from other VoucherGrid accounts:- Account ID is resolved from your authenticated session – it’s never accepted from request parameters
- Background jobs receive account context explicitly
- Team members with location restrictions can only access data from their assigned locations
Audit logging
Every significant action is recorded in an append-only audit log:- Voucher events – created, redeemed, voided, refunded, expired
- Authentication – logins, logouts, password changes, 2FA events
- Team changes – invites, role changes, removals
- Settings and integration changes
- Billing events
Payment security
VoucherGrid uses Stripe for all payment processing. Card details are entered directly into Stripe’s secure payment form – they never touch VoucherGrid’s servers. This qualifies us for PCI DSS SAQ-A, the simplest compliance level.Data privacy
Your rights
- Workspace data export - accepted Owners can request a package from Settings → Data export after the required identity check. Review the listed categories and exclusions first: this is not a complete database backup or a final handover snapshot. It excludes, among other things, credentials, image files, support attachments, rendered reports and accounting journals. Packages are available for 48 hours; newly issued private download links last up to 15 minutes, capped by package availability.
- Leaving or deleting a personal account - contact support@vouchergrid.com for help. Before removing or demoting the last accepted Owner, invite another Owner and wait for them to accept.
- Workspace cancellation and retention - cancellation is managed separately in Plan & billing. Paid access continues to the confirmed period end, followed by the included 30-calendar-day existing-voucher handover and then records-only access. Cancellation does not delete your personal sign-in or erase all retained voucher and financial records. See Billing & Subscriptions for the handover, access and retention boundaries.