Encryption
TLS 1.3 in transit and AES-256 at rest, including the photographs. There is no setting for this and no plan without it.
Who at Benchtop can see it
Four people, all engineers, all with individual accounts and two-factor. Access is logged. Nobody in sales or support has standing access to your job data.
Backups
Nightly, kept for 30 days, restored into a scratch environment once a quarter to prove they work. An untested backup is a belief, not a backup.
Subprocessors
Four of them, listed below. We do not add one without saying so, and Group customers get 30 days' notice.
Uptime
99.9% on every plan, 99.99% with a credit schedule on Group. The status page is public and we do not edit it after the fact.
Somebody to email
A person, on a weekday, usually within a few hours. See below.
Subprocessors
| What it does | Where it runs | What it holds |
|---|---|---|
| Application hosting and database | United States, east | Everything |
| Object storage for photographs | United States, east | Photographs only |
| Transactional messaging | United States | Phone numbers and message text, for 30 days |
| Payment processing for deposits | United States and Ireland | Card data, which never reaches us |
| Error monitoring | European Union | Stack traces, scrubbed of customer data |
Named by function rather than by brand, because a fictional demonstration site naming real vendors as its processors would be the one thing on it that could actually mislead somebody.
Frequently asked questions
Where is my data stored?
In the United States, east coast, with backups in a second region. Group customers who need it somewhere else should ask, because the answer depends on the region and we would rather tell you than have you find out.
Can Benchtop staff read my job notes?
Four engineers can, and only through an access path that logs who looked and when. Support cannot, which occasionally makes support slower and is the correct trade. If we need to look at something to help you, we ask first.
What happens if I cancel?
The account goes read-only for 90 days so you can export everything, then it is deleted. Your customers' job pages stay up for 30 days so nobody is left holding a dead link to their own repair.
Do you sell anything to anyone?
No. Not the job data, not the customer numbers, not aggregate statistics, not "anonymised insights". The business model is the subscription and there is no second one.
What do you do if there is a breach?
Tell you within 72 hours with what we know, including the parts we do not know yet, and keep telling you as it changes. The first message will be early and incomplete rather than late and tidy.
Do you have SOC 2?
Type II, renewed annually. Group customers can request the report under NDA through their named contact.