Security
How we protect your data
Security is built into SwiftManage from the ground up. Here's how we keep your restaurant and customer data safe. Last updated: 19 August 2026.
ISO 27001
ISO Security Management
SOC 2 Type II
SOC for Service Organizations
GDPR
Data Protection and Privacy Regulation
Enterprise grade security
Security handled through enterprise grade infrastructure
Security is our priority. Your customer information, orders, reports and business data are protected through encrypted systems and controlled access permissions across the entire platform.
Encrypted data
Encrypted in transit and at rest.
Secure authentication
Strong sign-in and session controls.
Daily backups
Automatic daily secure backups.
Role-based permissions
Access limited to what each role needs.
Data encryption
All data is encrypted in transit using TLS and at rest using industry-standard encryption. This means your data is protected whether it's moving between your device and our servers or stored in our databases.
Authentication
Accounts are protected with secure authentication, including hashed passwords and session management. We encourage strong, unique passwords and support password resets through verified channels.
Role-based access control
Access to data is granted by role. Each user only sees the features and data their role requires, so sensitive information stays protected across your team.
Staff permissions
Administrators can assign and adjust staff permissions at any time. Roles can be limited to specific sections of the portal, and accounts can be disabled instantly when a team member leaves.
Secure payment processing
Payments are processed by Stripe, a PCI-compliant provider. SwiftManage never sees or stores full card numbers. Card data is handled entirely within Stripe's secure environment.
Server security
Our servers run in secure cloud environments with firewalls, restricted access and regular patching. Administrative access is tightly controlled and logged.
Database protection
Databases are isolated, access-controlled and encrypted at rest. Access is limited to authorised services and personnel, and queries are logged for accountability.
Backup procedures
We take automatic daily backups of your data. Backups are encrypted and stored separately so your information can be restored quickly if ever needed.
System monitoring
Our systems are monitored around the clock for performance and security. Unusual activity triggers alerts so our team can investigate and respond quickly.
Vulnerability management
We regularly review and update our platform to address known vulnerabilities. Dependencies are kept current, and security updates are applied promptly.
Infrastructure security
Our infrastructure follows security best practice, including network segmentation, least-privilege access and regular configuration reviews.
Incident response
If a security incident occurs, we follow a clear incident response process to detect, contain and recover, and to notify affected clients where required. Details are in our Incident Response Policy.