Security at NeedsIQ

All traffic to needsiq.com is served over TLS behind Cloudflare. Data is encrypted at rest on our EU hosting. We use Stripe-hosted Checkout and Customer Portal for payments and never store card numbers ourselves.

Passwords are hashed with bcrypt; we never store them in the clear, and new passwords are checked against known-breached databases at signup. Sessions are httpOnly cookies backed by a revocable server-side record, so a device can be signed out immediately. Magic links (client fact-find fill, report delivery, firm invites, password reset) carry high-entropy tokens; only the hash of each token is stored, so a database leak cannot mint working links. These links are single-use or single-active, expire, and can be revoked.

Authorisation is enforced on the server for every request. A client's data is scoped to the owning adviser; a compliance reviewer sees only their own firm's cases; firm management is limited to firm admins. Authentication and public endpoints are rate limited to blunt brute-force and abuse.

NeedsIQ is hosted in the EU (Hetzner Cloud, Finland). We take regular encrypted backups so data can be restored after an incident. Production access is least-privilege, limited to a small ops team, with audit logging on privileged changes.

Draft generation uses the Anthropic API. Under the API terms, the request and response are not retained by Anthropic for training. We do not use client data to train shared models.

Advisers can export or request deletion of their account data from settings, and we help fulfil client subject-access and deletion requests. Firm customers process client data under our Data Processing Agreement. See the Privacy Policy for retention periods and your rights.

If you believe you have found a security issue, email [email protected] and we will investigate. Please give us reasonable time to fix an issue before disclosing it publicly.