Security and POPIA

Remote support software can reach every computer you look after. That is why it is built to be hard to misuse — by an outsider, and by anyone who should not be on a particular computer.

The sessions

Encrypted end to end

A session's screen, keystrokes, files and chat are sealed between the technician's console and the customer's computer (P-256 key agreement, AES-GCM). Our servers pass them on and cannot read them.

Each computer proves who it is

Every computer has its own key. If a computer you know turns up with a different one, the console stops and asks before going on.

The customer decides

Attended connections need the customer's yes. Unattended access is their switch, with an optional password of their own that nobody — owner included — can get round.

Everything is on the record

Every session is its own ticket: who connected, to which computer, when and for how long. A recording is kept only when a technician chooses to make one.

Signing in

  • A code from an authenticator app for every person, at every sign-in
  • A trusted computer is asked once a week, not every time
  • One sign-in at a time: a second computer signs the first out
  • Remove a person and they are signed out at once, everywhere
  • Accounts lock after repeated wrong passwords
  • Passwords are never stored — only a slow one-way hash
  • From a phone or tablet: a passkey, and your fingerprint, face or PIN for every connection
  • Updates to the apps are signed by us and checked before they are installed; an older one is refused

Your data, in South Africa

Your company's data is kept on servers in South Africa, encrypted on the way there (TLS 1.3) and backed up encrypted every night. Each company's data is kept apart from every other's.

It is yours to take with you: the owner or a supervisor can download everything — clients, tickets with their story, photos, files and the knowledge base — in one zip at any time, with the clients in a spreadsheet that imports straight back in.

POPIA

For your customers' information you are the responsible party and we are your operator, as POPIA describes; we use it only to provide the service to you. Our privacy policy and terms say exactly what we keep and why. The website uses no analytics and no trackers, and no cookies beyond those that make signing in and its forms work.