Security

Built to be trusted with your numbers

Eddie reads sensitive financial and operational data, so security is not a feature bolted on, it is how the product is built. Here is what that means in practice.

Hosted in Australia

Eddie runs on infrastructure hosted in the Sydney region. Your data stays in Australia, which matters for local businesses and their advisers, not shipped offshore to a US dashboard tool.

Read-only access

Eddie connects to your sources with read-only access wherever the provider supports it, and never writes back. It cannot change an invoice, a job or a record in WorkflowMax, Xero or HubSpot. Your source systems stay the systems of record.

Encrypted connections

Connections to your sources and to Eddie are encrypted in transit. Access tokens are held server-side only and are never exposed to the browser.

Isolated per organisation

Each organisation's data is isolated at the database level, with role-based access so people only see what their role allows. One tenant can never see another's figures.

What we store

Eddie stores a working copy of the business records it reads (jobs, invoices, timesheets, contacts and the like) so it can present them quickly, plus your account details. It does not store more than it needs to build your dashboard.

Revoke any time

You can disconnect a source at any moment, from Eddie or from the provider's own connected-apps screen. Disconnecting stops all further syncing from it immediately, and you can ask us to delete the data we hold.

Questions from your IT or advisers?

We are happy to walk your team through how Eddie handles data before you connect anything. For the formal detail on data handling and retention, see the privacy policy.

Ask a security question