What we do with your data, where it lives and how we look after it. Only what the product does today is described here. Where something is still being built, we say so.
We hold no security certification. No ISO 27001, no Cyber Essentials, no SOC 2.
Where your data lives
| What | Where |
|---|---|
| Database: jobs, customers, drivers, transfer notes | Supabase, London (UK) |
| Photos, signatures and PDFs | Supabase storage, same project as the database. Region confirming |
| Office app and background processing | Vercel, London (UK) |
| Driver app | Vercel. Region confirming |
| Email, job scheduling, billing, status page | Other suppliers, some outside the UK. See the sub-processor list |
Who is responsible
Your firm decides what Tipslip is used for, so your firm is the controller of your waste records and your drivers' data. Tipslip stores and handles that data only on your instructions, as your processor.
How we protect it today
- Encrypted connections. All three apps are served over HTTPS only, with HSTS. Each app sets a content security policy that limits what the browser will load.
- Firms kept apart. Every record carries its firm's ID. Our code filters every query by firm, and the database enforces the same rule on its own with row-level security, set for each request. Our automated tests check this against a real database.
- Private files. Photos, signatures and PDFs sit in a private store, one folder per firm. Nothing is public. Files open through signed links that expire after 15 minutes.
- Driver PINs. Stored only as one-way hashes. Too many wrong PINs lock driver sign-in for the firm.
- Your Defra code. Never logged, never printed on a PDF or export.
- Encryption at rest. Supabase encrypts stored data as a platform feature.
- Who can get in. Tipslip is run by one person, its founder. Nobody else has access to production systems. Our admin screens can technically read every firm's data, but they show firm-level summaries only.
- Location. The driver app takes one position fix when a job is saved. It never tracks in the background.
What we are building
- Two-step sign-in for owners, admins and our own admin access.
- A log of who viewed driver positions, photos, signatures and PDFs, visible to your firm.
- Removing hidden location data from photos before upload.
- Automatic deletion when retention periods end. Today we keep records until you ask us to delete them.
Sub-processors
The companies that help run Tipslip, what each receives and where: Sub-processor list. We email account owners 30 days before adding one.
Documents
Report a security problem
Email support@tipslip.co.uk with "Security" in the subject line. Tell us what you found and how to reproduce it. We will reply within 2 working hours on weekdays. Please don't access other people's data or disrupt the service while testing. We don't run a bug bounty.
Service status: status.tipslip.co.uk
Change log
25 September 2026: first version.