Where is EasyBee's data stored?

On Amazon Web Services in London (the eu-west-2 region). The database, the application server and the photos and files people upload are all stored there, and every connection to them is over HTTPS with TLS 1.2 or newer.

Who at our company can see pay and labour costs?

Only people whose role includes the permission to see them. Labour costs, the rota, timesheets and reports each sit behind their own permissions, and many can be limited to the sites a person manages, so a manager can run their own site without seeing another's costs.

Can we delete our data?

Yes. A person can delete their own account in the app, under Settings, Account and security, and the app explains what is removed and what is kept as a record of work already done. For a whole workspace, or if you cannot sign in, email us.

Can you complete our security questionnaire?

Yes. Email it to us, along with any data protection terms your organisation needs agreed, and a person will work through it with you.

Security and data

Your team's data: where it lives and who sees it

A rota holds people's hours and pay, and the checks hold your records. This is how EasyBee looks after both, in plain terms.

Stored in London

EasyBee runs on Amazon Web Services in London. The database, the app's server and the photos and files people attach (in Amazon S3) are all there.

Encrypted on the way

Every connection to the app and the API is HTTPS, and older protocols are refused: TLS 1.2 is the oldest either will accept.

Passwords never kept as text

Passwords are stored as bcrypt hashes, and sign-in sessions are stored hashed too, so a copy of the database would hold no usable password or session.

Backed up every day

The whole server is snapshotted automatically every day, so a bad day can be rolled back rather than rebuilt.

Who sees what

Each person sees what their job needs

Staff see their own shifts and work. What anyone else sees is set by their role, not by who happens to have the spreadsheet.

Roles decide what each person sees

A role is a set of permissions, more than a hundred of them, down to single actions like publishing a rota, seeing labour costs or approving a timesheet. Start from a preset such as head chef or server and adjust it.

Limited to their own sites

Many permissions come in an own-sites version, so a site manager can run their site's rota, costs and reports without seeing the others'.

Claude sees what the person sees

If you connect Claude, it signs in as the person who connected it and works through their permissions. It cannot see or do anything they could not.

The company, and the law it works under

EasyBee.team Ltd is a UK company, registered in England and Wales (company number 17396433), and handles personal data under UK data protection law: the UK GDPR and the Data Protection Act 2018. The privacy policy says what is collected and why.

Anyone can delete their account from inside the app, without asking us first.

Email a security question

Common questions

Where is EasyBee's data stored?: On Amazon Web Services in London (the eu-west-2 region). The database, the application server and the photos and files people upload are all stored there, and every connection to them is over HTTPS with TLS 1.2 or newer.
Who at our company can see pay and labour costs?: Only people whose role includes the permission to see them. Labour costs, the rota, timesheets and reports each sit behind their own permissions, and many can be limited to the sites a person manages, so a manager can run their own site without seeing another's costs.
Can we delete our data?: Yes. A person can delete their own account in the app, under Settings, Account and security, and the app explains what is removed and what is kept as a record of work already done. For a whole workspace, or if you cannot sign in, email us.
Can you complete our security questionnaire?: Yes. Email it to us, along with any data protection terms your organisation needs agreed, and a person will work through it with you.