Safewill's core mission is to provide the safest, easiest and most secure way for all Australians to create their will. As such, data security and privacy are our highest priority, and we have put a range of systems and policies in place to protect you and your data. These are set out below. If you have any questions at all about our Data and Security policies, please get in touch.  

Safewill's Security Practices

The security of your data is our highest priority at Safewill. This document outlines some of the policies, procedures and systems in place to ensure your data is protected.

Data Communication

All communication with Safewill's GraphQL API is encrypted using TLS, meaning data is secured with the same level of encryption used by financial institutions. This also goes for any communication between Safewill's API and third party services such as Paperplane, S3 and Mailgun

Data Retention

Safewill uses Heroku's Continuous Protection service to backup data, allowing for rollbacks in the event of data loss. 

Financial Security

Payments are processed by Stripe, a PCI-DSS Level 1 compliant service provider - this is the most stringent level of certification available in the payments industry. Stripe uses best in class tools to protect customer data and is widely recognised as a global leader in payment data security. Your credit card details are sent directly to Stripe over encrypted connections and are not stored or logged on our database. 

To find out more about Stripe's security, click here.

Password Security

 Safewill enforces the use of strong passwords through a number of requirements:

  • Passwords must be a minimum of 8 characters
  • Passwords must include a number or special character
  • Passwords cannot contain the user's name or email address

No plain text passwords are stored at any time. 

Safewill also recommends that your password is unique for your Safewill account and updated regularly. If you believe the integrity of your password's has been compromised in any way, please get in touch with us as soon as possible. 

Hosting

Safewill's application runs on Heroku and Amazon Web Services (AWS). For more information on their security provisions, refer to the following documents:

Vulnerabilities

Software libraries used by Safewill are regularly updated. Security updates from software libraries will be applied as soon as possible.

Did this answer your question?