Security at Taskploy
Protecting the information your business depends on
Taskploy is designed to help organizations manage important operational, financial, customer and employee information. We approach security as an ongoing responsibility across our technology, processes and people.
Security throughout the product lifecycle
Taskploy's security program addresses how the platform is designed, developed, operated and supported. Controls are reviewed as the product, threats and customer requirements evolve.
- Protect customer information
- Control access
- Monitor platform activity
- Maintain service resilience
- Manage vulnerabilities
- Respond to incidents
- Support customer security requirements
Protecting data in transit and at rest
Taskploy uses industry-standard encryption for supported data in transit and at rest, including TLS for connections and encryption for stored data at rest.
Give users the access they need
Role-based permissions help organizations control which modules, records and actions employees can access.
- Unique user accounts
- Role-based access
- Module permissions
- Approval permissions
- Administrative roles
- Password requirements
- Record permissions where enabled
- Multi-factor authentication where enabled
- Single sign-on where enabled
- Session controls and account lockout
- Access review
Building and maintaining secure software
Taskploy follows secure software development practices designed to reduce risk throughout the product lifecycle. This includes reviewing code changes, managing software dependencies, monitoring for vulnerabilities, protecting secrets, separating environments and applying controlled release processes.
Security practices are reviewed and improved as the platform evolves.
A resilient cloud foundation
Taskploy uses cloud infrastructure designed to support availability, scalability and data protection.
Our infrastructure approach includes controls for network security, monitoring, backups, access management and service recovery. Contact our security team for details about hosting, redundancy and recovery capabilities.
Maintaining visibility into important activity
Taskploy monitors platform and infrastructure activity to help identify operational and security issues.
Where available, activity histories and audit information also help authorized users understand important changes, actions and decisions within their workspace.
Preparing for service disruption
Taskploy maintains backup and recovery processes designed to support service continuity and protect customer information.
Recovery procedures are reviewed and tested as part of our ongoing operational and security practices.
Security and privacy work together
Protecting customer information requires both strong security controls and responsible data practices.
Taskploy processes personal and business information in accordance with its Privacy Policy, contractual obligations and applicable data protection requirements.
Read the Privacy Policy →Working with trusted payment providers
Where Taskploy supports online payments, payment processing is handled through approved payment service providers.
Taskploy is designed to minimize unnecessary exposure to payment card information and relies on supported payment providers for applicable payment-processing controls.
Additional information about payment security and provider responsibilities is available on request.
Request security documentation
Taskploy works with eligible customers and prospective customers to support reasonable security and privacy review requirements. Available materials depend on your plan and engagement.
- Data Processing Agreement (DPA) — published online; signed copies on request
- Subprocessor list — available on request at privacy@taskploy.com
- Security questionnaires — available for eligible paid plans; contact sales or security
- Privacy Policy and cookie documentation — on our legal pages
We aim to respond to documentation requests within 5 business days. Enterprise customers may have additional review options through their account representative.
Security controls you manage in Taskploy
Each workspace belongs to one company. Administrators control who can access modules, records and approval actions. See our Help Centre for practical setup guidance.
- Assign roles and module permissions
- Remove access when employees leave
- Configure approval workflows on Professional and above
- Review activity history where available in your plan
- Enable multi-factor authentication where available
Security incidents and notification
Taskploy maintains incident-response procedures designed to investigate, mitigate and remediate security events. Where Taskploy processes personal data on your behalf and becomes aware of a security incident affecting that data, we will notify affected customers without undue delay in accordance with our Data Processing Agreement and applicable law.
Report a security concern
If you believe you have identified a security vulnerability in Taskploy, contact security@taskploy.com with enough information for our team to investigate. Do not use the general contact form for sensitive vulnerability details.
- Description
- Affected feature or URL
- Reproduction steps
- Potential impact
- Supporting screenshots or logs
- Your contact details
Do not access or modify data that does not belong to you. Do not disrupt service. Do not use social engineering. Do not publicly disclose the issue before coordinated resolution. Follow applicable laws.
We aim to acknowledge valid reports within 48 hours.
Security is a shared responsibility
- Use strong unique passwords
- Enable multi-factor authentication where available
- Review employee access regularly
- Remove access promptly when employees leave
- Protect API keys
- Configure roles carefully
- Review integration permissions
- Train employees to recognize phishing
- Report suspicious activity
- Avoid placing highly sensitive information in unsupported fields
Security FAQ
Where is Taskploy data hosted?
Taskploy uses secure cloud infrastructure to host and operate the platform. Data hosting locations may vary depending on the services used and the region in which Taskploy is offered. Where regional hosting options are available, we will clearly explain the applicable data location and any customer choices.
Does Taskploy encrypt customer data?
Taskploy uses encryption to help protect customer data during transmission and while stored within supported systems. We also apply access controls and other security measures designed to reduce unauthorized access to customer information.
Does Taskploy support multi-factor authentication?
Taskploy supports account security controls designed to help protect user access. Multi-factor authentication availability may depend on your account configuration or subscription plan. Where available, we recommend enabling it for administrators and users with access to sensitive business information.
Can I request a security questionnaire or data processing agreement?
Yes. Eligible customers and prospective customers may contact our sales or security team to request available security documentation, including security questionnaires, data processing agreements and related privacy or compliance information.
How do I report a vulnerability?
If you believe you have identified a security vulnerability in Taskploy, please contact our security team at security@taskploy.com and include enough information for us to investigate the issue. Please avoid accessing or modifying data that does not belong to you and do not publicly disclose the issue before our team has had an opportunity to review it.
Have a security question?
Contact our team to request available security information or report a concern.