Trust centre

Security

Service Sheet uses layered controls to protect organisation data, limit access and preserve evidence of important actions.

Last updated:

Security approach

Service Sheet separates each organisation’s records, limits access to authorised users and records important changes. No internet service can promise absolute security, so these safeguards are supported by monitoring, protected backups, access management and incident response.

Protective controls

  • Secure sign-in and six-digit email verification for trusted browsers and sensitive account actions.
  • Organisation roles, account permissions and assigned-Location access are checked before protected records or actions are made available.
  • Passwords and verification codes are protected and are not included in routine Service Sheet activity records.
  • Repeated failed or unusual attempts are limited and may be temporarily blocked to protect accounts and public reporting workflows.
  • Private issue-photo storage, customer-authorised access and automatic resolved-issue photo retention.
  • Important maintenance, issue, account and billing changes are recorded so authorised people can review what occurred.

Customer responsibilities

Organisations should grant access only to appropriate people, use suitable roles and Location permissions, protect passwords and email accounts, use secure devices, remove access promptly when it is no longer needed, and keep contact information current. Never send passwords, six-digit verification codes, invitation links or payment-card details to support.

Report a security concern

Please include a clear description, the affected page or workflow, the time observed and any non-sensitive error message. Do not access another customer’s data, retain information that is not yours, or disrupt the service while investigating. If a report includes sensitive material, first ask support for a suitable way to share it.