Your data, protected and backed up every day
Your clients, invoices and payments run through Tandem. Here is how we keep them safe, private and always available.
Workspace security
Admin
Sign-in protection
Require two-factor sign-in
Single sign-on (SSO)
Sign out after 12h idle
Allow sign-in from new countries
All checks passed
by Cassy
Backups
Last backup 02:00
Kept for
30 days
Regions
2
Uptime over the last 12 months
99.98%
Encryption for all data at rest
AES-256
Type II, audited every year
SOC 2
Daily backups, kept for 30 days
30 days
Security built in, not bolted on
The practices behind every account, on every plan. No add-ons to buy.
Encrypted everywhere
Data travels over TLS 1.2 or higher and is stored with AES-256 encryption.
Role-based access
Give each person only what they need. Hide prices, payroll or client notes by role.
Two-factor sign-in
Turn on multi-factor authentication for yourself, or require it for the whole team.
Independent pen tests
Outside security firms test our app and infrastructure at least once a year.
Automatic backups
Daily backups in two separate regions, kept for 30 days and tested every month.
Audit log
See who signed in, what changed and when. Export the log whenever you need it.
Checked by others, not just us
SOC 2 Type II
Audited yearly by an independent firm
ISO 27001
Certified information security
GDPR
EU data processing terms available
PCI DSS
Card payments via certified partners
Security questions, answered
The things IT teams and accountants ask us most.
Where is my data stored?
Who at Tandem can see my data?
Do you store card details?
Can I export or delete my data?
Can I get your SOC 2 report?
How do I report a vulnerability?
Need our security pack or a DPA?
Our team can send reports, policies and a signed data processing agreement.
