Keep your business data secure
EaseDesk keeps each business's data separate at the database level, backs it up every night in encrypted form and tests a restore every week. You control access with roles, two-step sign-in, password rules and an audit log of every change.
In EaseDesk: Settings → Organisation → Security. Log in or start a free trial.
Steps
- 1 Turn on two-step sign-in for yourself under Account → Two-step sign-in.
- 2 Open Settings → Organisation, go to the Security tab, and set your Password rules.
- 3 Switch on Every member also signs in with an authenticator app if you want it for your whole team, and click Save.
- 4 Under Settings → Roles, give each person only the access their work needs.
- 5 When someone leaves, choose Disable access for them under Settings → Team.
- 6 Look through Settings → Audit log from time to time.
How your data is protected
- Separate data: every business’s records are kept apart from every other business’s at the database level, so one organisation’s records cannot be read from another.
- Backups: the database is backed up every night in encrypted form, and a backup is restored as a test every week.
- Keys: the Razorpay key secret and webhook secret you enter for online payments are stored encrypted, and the screen never shows them again after you save them.
- Sessions: a sign-in lasts 30 days on a device and is extended while you use it. Log out from the menu under your name on shared computers.
What you control
Password rules apply to every member: a minimum length (never less than 10 characters), capital letters, small letters, numbers or symbols, not reusing recent passwords, and a new password every so many days. A member of several organisations follows the strictest rules. Only the Owner and Admins can change them.
Each role sees and does only what you allow, and every change is recorded in the audit log, which nobody can edit.
Support sessions
When EaseDesk support signs in to help you, the session lasts at most an hour, opens your organisation only, cannot change passwords or mobile numbers, shows a Support session banner in the app, and is recorded in your audit log. Support must give a reason, and every owner is emailed it each time. The member it was opened as sees it under Account → Devices and can sign it out.
Under Settings → Organisation → Security → EaseDesk support, an owner can ask that support waits to be let in: switch on Support opens a session only after an owner lets them in, then click Let support in for an hour, four hours, a day or three days when you ask for help. Close support access now ends it at once, with any session that is open.
Ten wrong passwords or two-step codes in a row pause signing in with a password for 15 minutes, and you are emailed. Email me a code instead still works.
See Security and control and the sub-processors page for more.
Questions
Can EaseDesk support add people or change roles in my organisation?
No. In a support session, staff cannot invite anyone, change members or roles, reset two-step sign-in or add bots. Only you do that.
Where is my data stored?
The servers that run EaseDesk and its database are in India (Mumbai). Files and the encrypted backups are kept in Cloudflare R2 storage. The sub-processors page lists every service EaseDesk uses and what each one handles.
Can EaseDesk staff see my data?
Staff work from a console that shows your plan and usage, not your invoices or books. To look inside your organisation to help you, support opens a support session that lasts at most an hour and is recorded in your audit log.
What happens if I change my password?
Every other device you were signed in on is logged out. Resetting a forgotten password logs out every session.
Still stuck? WhatsApp or call +91 91525 20552 or write to support@easedesk.com. Updated .