01Our approach
Security is built into every system from the start, not added at the end. The same team designs, builds and supports each system, so the people who understand it best are the ones looking after it.
02Protecting client systems
- Encrypted connections: websites and admin panels are served over HTTPS, so information is encrypted between the browser and the server.
- Role-based access: owners, managers and supervisors each see only what their role needs. Financial information stays with the owner.
- Secure sign-in: admin panels use individual accounts, so access can be removed when someone leaves.
- Up-to-date software: we apply security updates to the systems we host and support.
03Backups and recovery
Invoices, jobs and customer records in the systems we host are backed up every night to separate, secure locations, so they can be restored if something goes wrong.
04How our team handles data
- Team members only access client data when they need to, for example to fix a problem you’ve reported.
- We use trusted hosting and email providers that maintain recognised security standards.
- We collect as little personal information as possible. See our Privacy Policy.
05If something goes wrong
If we become aware of a security incident affecting your information, we’ll investigate straight away, contain it, and tell affected clients without undue delay. Where the law requires it, we’ll also report it to the Information Commissioner’s Office within 72 hours.
06Reporting a vulnerability
If you think you’ve found a security weakness in this website or a system we’ve built, please email info@brixlite.com with “Security” in the subject. Include what you found and how to reproduce it.
We ask that you:
- give us reasonable time to fix the issue before telling anyone else;
- don’t access, change or delete other people’s data;
- don’t disrupt our services or our clients’ businesses.
We’ll acknowledge your report, keep you updated and thank you for helping keep our clients safe.