Separate accounts
Every customer has their own account, and every request is limited to that account's data.
Security & GDPR
Status page security and GDPR
What we do to look after your data, and the tools you get to meet your own GDPR responsibilities.
Security
Practical protection for your account and subscribers
Two-factor login
Protect team logins with a time-based code from an authenticator app (TOTP).
Single sign-on
Sign in through your identity provider with OpenID Connect, after proving you own your domain.
Roles
Give people the Owner, Admin or Member role, depending on what they need to do.
Audit log
See what happened in your account, for when you need to look back.
Automatic HTTPS
Status pages, on our subdomains or your own domain, use HTTPS certificates that are set up for you.
GDPR
Tools for your own responsibilities
Double opt-in
Subscribers confirm before they get anything, and can unsubscribe in one click.
Export and delete
Export your subscribers, remove any one of them, or delete your whole account.
Clear roles
For the subscribers on your page, you are the controller and we are your processor. Our Data Processing Agreement sets out how that works.
Read more in our Privacy Policy and Data Processing Agreement.
Keep reading
