Security at Hearth
Hearth handles some of the most sensitive information a business has — payroll, Social Security numbers, and bank accounts. We maintain a written information security program with administrative, technical, and physical safeguards designed to protect it.
Encrypted in transit and at rest
Your data — including Social Security numbers and bank details — is encrypted both in transit and at rest.
US-only data residency
Hearth data is stored and processed in the United States.
SOC 2 Type 2 (in progress)
We're pursuing SOC 2 Type 2 attestation and will make our report available to customers under confidentiality.
Tamper-evident audit logs
Every action in Hearth is written to a tamper-evident audit log, so there's always a clear record of what happened.
Least-privilege access
We limit access to sensitive data to the people and systems that need it, with access controls throughout.
Your data, exportable
You own your data and can export it at any time — during your subscription and on the way out.
Report a vulnerability
Found a security issue? We want to hear about it. Email [email protected] with the details and we'll respond promptly.
For how we collect, use, and protect personal information, see our Privacy Policy.