Bliss HQYour clients trust you.
You can trust Bliss HQ.
You handle bank statements, payroll and tax documents for other people. Here's how Bliss HQ protects them.
Encrypted in transit
Every page and file moves over HTTPS, and browsers are told to never connect any other way.
Firms are kept apart
Every request is checked against the firm and the clients the person is allowed to see. One firm can never see another's data.
Roles & client-level access
Owners decide what each role can do — and which clients each person can open. People can't raise their own permissions.
Two-step sign-in
Add a one-time code by email or text message on top of the password.
Idle sign-out
Each firm chooses how long staff can be idle before being signed out, with a warning first.
Audit trail
Important actions — permission changes, report delivery, billing changes — are recorded with who did what and when.
Document retention
Choose what to keep and what to clear. Short-term files like bank statements can be removed automatically after 12 months.
Read-only by default
QuickBooks and Xero connections use the official sign-in from each provider. Bliss HQ only writes to a ledger when you choose to, such as pushing an invoice.
Payments by Stripe
Card details go straight to Stripe. Bliss HQ never sees or stores card numbers.
Hosting & compliance
Where is our data stored?
[Hosting provider, data-centre country and backup schedule.]
Do you use our data to train AI?
[Confirm against your AI provider's commercial terms before publishing.]
Are you SOC 2 certified?
[Only state certifications you hold. If none yet, say what you're working towards.]
How do I report a security issue?
Email [security@blissfirm.com]. We'll acknowledge your report within [2 business days].
Read our privacy policy and terms.