Security
How your data is kept.
Your clients, rates and documents are the business. This is how Safari Studio keeps them private, encrypted and backed up.
Your data stays yours
- Rates, contacts, documents and photos are private to your organisation. Every query the application makes is limited to your organisation's data.
- The shared lodge directory holds lodge names and map points, never your rates.
- You can export everything at any time. When a trial ends the workspace becomes read-only, export stays open, and nothing is deleted for 90 days.
Encryption
- Every connection to Safari Studio is encrypted with TLS.
- Dates of birth, medical and insurance details and payment references are encrypted in the database with AES-256-GCM, with the key kept outside the database.
- Safari Studio does not collect passport numbers.
Files
- Files are stored privately in Cloudflare R2 and opened through short-lived signed links.
- Uploads are scanned for viruses before anyone can open them.
Backups and hosting
- The database is backed up every night, encrypted before it leaves the server, and the last 30 backups are kept. The key that opens them is not on the server.
- Restoring a backup into a fresh copy of the system is rehearsed, so a restore is a known procedure, not a hope.
- Safari Studio runs on servers at DigitalOcean; files and backups are kept in Cloudflare R2.
Payments
- Subscriptions are paid through Stripe. Card numbers go to Stripe directly and never reach our servers.
Reporting a problem
If you find a security issue, write to [email protected]. We answer within one working day. How we handle personal data is in the privacy policy and the data processing terms.
Get started
Questions about your data?
Ask on a 20-minute call, or write to us. The Safari Studio team answers.