Security, in plain words.

• Your practice’s data is kept apart from everyone else’s

  Each practice has its own workspace. The database itself enforces this with row-level security: every read and write runs as your signed-in account, and rows that belong to another practice are refused, even if the application code had a mistake in it. We test this automatically on every change.

• You decide who sees what

  Owners and admins invite people and choose their role: owner, admin, member or viewer. Removing someone stops their access straight away. Invite links work once, for 14 days, and only for the email address they were sent to.

• Every change is recorded, including ours

  Your audit log records who changed what and when. Nobody can edit or delete an entry. If anyone at Orderhatch ever opens your workspace, for example to help you set up, that visit is logged and shown to you.

• Encrypted on the way and at rest

  The app is only served over HTTPS. Your data is stored with our database provider, Supabase, which encrypts all customer data at rest with AES-256.

• Files are private to your practice

  There are no public links. Each time someone opens or downloads a file, we first check they’re a member of your workspace, then hand them a link that stops working after five minutes.

• Clients see only what you share

  Clients sign in to their own area and see one project, and only what you share with them item by item. They never see your internal notes, the team list, your audit log, cost rates or other clients.

• AI: off until you switch it on, and drafts only

  AI helpers and Hatch are off until an owner or admin switches them on. Email addresses and phone numbers are taken out before anything is sent to Anthropic’s Claude API, whose commercial terms say they may not train models on this content. Hatch only reads and only sees what you can see. Every draft is for a person to check.

• Payments handled by Stripe

  Card and Direct Debit details are entered on Stripe’s own secure pages, so we never see or store your full card number or bank details.

• Yours to take, or to delete

  Owners and admins can download a copy of the workspace’s records as spreadsheet files at any time, whatever the state of the subscription. Ask and we’ll delete it.

• Never sold, never shared

  The only companies that handle your data are the ones that run the service, under contract, listed in our Data Processing Agreement.

Ask a security question Data Processing Agreement