Security and trust
How we look after your data
Who runs Zigaflow, what our contract commits us to, and how you control who sees what. Each answer links to where it is written down.
Who you are buying from
- Zigaflow Ltd, registered in England and Wales, company number 03888530. The company was incorporated on 3 December 1999 and has traded as Zigaflow Ltd since April 2020.
- Independent and privately owned. The majority shareholder is Tim Randall, our founder and CEO, a director since January 2000.
- Registered with the Information Commissioner's Office, registration ZA262432.
Sources: Companies House · Privacy policy
What the contract commits us to
- We process your data only on your documented instructions, as your processor under UK GDPR.
- Every sub-processor is bound by a written contract at least as protective as ours. The current list, with each one's purpose and location, is available on request, and you get 14 days' notice to object before we add or replace one.
- If you leave, we delete or return your data as you direct, and complete deletion within 90 days. Copies in routine backups are deleted on the backup cycle.
Sources: Data processing addendum · End user agreement
Who can see what
- Roles control which modules each person can open, so a warehouse or accounts team sees only its own work.
- Costs and prices can be hidden from a role, and a role can be stopped from exporting data.
- Users sign in with two-factor authentication. Only an admin can reset it, using their own password.
- When someone leaves, archiving them removes their access and frees their license.
Sources: Roles · Hiding prices and costs · Exports · Two-factor · Leavers
Where your data lives
- Integrations such as Xero, QuickBooks, payments and email are switched on by you. Once connected, that provider handles the data under your own agreement with them.
- Card payments from your customers go through Stripe's own payment screens.
- Your data is hosted on Amazon Web Services (AWS), in London by default.
- Zigaflow runs in the browser, so there is nothing to install on your computers.
Sources: Data processing addendum · Stripe