Information Security Policy
How Finpliq protects business, bookkeeping, payroll and tax records using secure access, encryption, logging and operational controls.
- Owner
- Security & Compliance
- Last reviewed
- 8 July 2026
← Trust CentreBack to top ↑ Back to top ↑ Back to top ↑ Back to top ↑ Back to top ↑ Back to top ↑ Back to top ↑
Policy library
Policies are grouped by governance area. Use the category links to jump to the right section, then open the full policy page or download the Word copy.
Security
Security policies
Secure Software Development Policy
How Finpliq should be developed, reviewed, tested and released without weakening authentication, authorisation, tenant isolation or filing workflows.
- Owner
- Engineering
- Last reviewed
- 8 July 2026
Access Control Policy
How Finpliq controls access to user accounts, businesses, admin areas and sensitive filing functions.
- Owner
- Security & Compliance
- Last reviewed
- 8 July 2026
Vulnerability Management Policy
How Finpliq identifies, triages, fixes and records security weaknesses.
- Owner
- Security & Engineering
- Last reviewed
- 8 July 2026
Incident Response Policy
How Finpliq identifies, responds to and communicates security incidents.
- Owner
- Security & Compliance
- Last reviewed
- 8 July 2026
Encryption Policy
How Finpliq protects sensitive records, secrets, tokens and credentials.
- Owner
- Security & Engineering
- Last reviewed
- 8 July 2026
Logging & Monitoring Policy
How Finpliq records important activity without exposing sensitive data.
- Owner
- Security & Operations
- Last reviewed
- 8 July 2026
Vulnerability Disclosure Policy
How security researchers and users can report vulnerabilities safely and responsibly.
- Owner
- Security
- Last reviewed
- 8 July 2026
Privacy
Privacy policies
Privacy Policy
How Finpliq processes account, business, bookkeeping, payroll, tax, support and website data.
- Owner
- Data Protection
- Last reviewed
- 8 July 2026
Cookie Policy
How Finpliq uses essential cookies and any configured analytics or marketing cookies.
- Owner
- Data Protection
- Last reviewed
- 8 July 2026
Data Processing Agreement
Controller/processor terms for businesses using Finpliq to manage records containing personal data.
- Owner
- Data Protection
- Last reviewed
- 8 July 2026
Data Retention Policy
How Finpliq retains and deletes business, accounting, tax, support and security records.
- Owner
- Data Protection
- Last reviewed
- 8 July 2026
Infrastructure
Infrastructure policies
Backup & Disaster Recovery Policy
How Finpliq plans for service continuity, recovery and data restoration.
- Owner
- Operations
- Last reviewed
- 8 July 2026
Business Continuity Policy
How Finpliq keeps essential service operations available during disruption.
- Owner
- Operations
- Last reviewed
- 8 July 2026
Third-Party Supplier Policy
How Finpliq manages suppliers such as hosting, email, payments, HMRC APIs and analytics where configured.
- Owner
- Operations
- Last reviewed
- 8 July 2026
Availability & Support Policy
How Finpliq communicates support, maintenance and availability expectations.
- Owner
- Operations
- Last reviewed
- 8 July 2026
Engineering
Engineering policies
Secure Deployment Policy
How Finpliq should be deployed safely without breaking migrations, authentication, billing or filing workflows.
- Owner
- Engineering
- Last reviewed
- 8 July 2026
Responsible AI
Responsible AI policies
Responsible AI Policy
How Finpliq uses Smart Bookkeeper assistance as suggestions, not automatic professional judgement or automatic filing.
- Owner
- Product & Compliance
- Last reviewed
- 8 July 2026
Compliance
Compliance policies
HMRC Filing Policy
How Finpliq handles supported HMRC workflows, validation, approval, submission evidence and correction routes.
- Owner
- Product & Compliance
- Last reviewed
- 8 July 2026
Financial Data Import Policy
How Finpliq handles manual statement imports, CSV/Excel/PDF uploads, receipt uploads and user-controlled categorisation.
- Owner
- Product & Compliance
- Last reviewed
- 8 July 2026
Legal
Legal policies
Acceptable Use Policy
How Finpliq must be used lawfully and safely.
- Owner
- Legal & Compliance
- Last reviewed
- 8 July 2026