Security
Payments
Every payment goes through Square. Card details are typed into Square's own secure form and sent straight to Square; they never pass through or rest on our servers.
Logins you share with us
Shared only through the encrypted intake form, never by email. Each one is encrypted with AES-256 before it's stored, the key lives only in our server environment, and every time someone opens one it is logged. We delete them when you leave.
Your data
Each client's records are walled off by database access rules; the public parts of our sites have no direct access to the database at all. Data is encrypted in transit (HTTPS everywhere) and at rest.
Access
Only the people building your system can reach it, using individual accounts. We review access when work finishes.
Honest messaging
Automated emails follow anti-spam law: real sender, our real mailing address, a one-click unsubscribe that works immediately and permanently, and a clear note when AI helped write a reply.
Report a problem
Found a security issue? Email morgan@footworkhq.com with “Security” in the subject. We'll reply within one business day.