Last updated 6 September 2026 · Terms · Privacy · Who we share data with
You are being asked to put your clients' home addresses, the note that says where the key is kept, and your cleaners' tax and background paperwork into somebody else's software. That is a real thing to ask. This page says plainly what happens to it.
Every company on Akye gets its own private area of the database — not a shared table with a column saying which company a row belongs to, which is the arrangement where one mistake shows your client list to somebody else. The separation is set on every single database connection, not once per page, because a connection handed on while still pointing at the last company is exactly how that kind of leak happens.
It is covered by automated tests that run before every release, including a check that removing one company cannot touch another's data.
Stored as a one-way hash, using pbkdf2-sha256. We cannot read your password, and neither could anyone who obtained the database. If you forget it, it is reset — never recovered, because it cannot be.
Repeated failed sign-in attempts from one place are slowed down. Attempts are recorded without the password, and without enough of the username to be worth stealing on its own.
A driver's licence, a W-9 and a background check are the three things this software holds that a thief would actually want: a government ID number, a social security number, and somebody's criminal history.
Those three are encrypted and stored inside the application, and can only be opened by someone signed in as the owner. No public web address for them is ever created — which means there is no link to leak, forward, or find in a browser history later.
Payments run through Stripe. Card numbers go from your customer to Stripe directly and are never stored in, or passed through, this software. The payment keys you save in Settings are encrypted before they are written down.
The whole database is backed up every night, encrypted before it leaves, and stored at a different company from the one running the software — because a backup sitting next to the thing it is backing up does not survive the account being suspended or the provider having a bad day.
Every backup is then restored and counted back automatically, the same night. A backup nobody has restored is a file, not a backup, and the difference only becomes apparent at the worst possible moment. If a night's backup does not restore cleanly, the job fails loudly rather than reporting success.
Every page is served over HTTPS. Your sign-in cannot be read by scripts in the browser, is not sent when another website tries to act on your behalf, and expires after fourteen days so a shared office computer does not stay signed in indefinitely.
We do not sell it, and we do not use your business data to train anything. You can export it, and if you leave, it is deleted. The privacy policy covers what is kept, for how long, and what happens when you cancel; the data sharing page lists every outside company involved and what each one sees.
It is a record-keeping tool. It is not a payroll provider, not a background check company, and not an adviser on whether somebody is an employee or a contractor. It computes and records; the decisions and the filings stay yours. The terms set this out in full, and it is worth reading before you rely on any of it.
If you think you have found a security problem, please write to akyecrm@gmail.com. If it concerns a specific company's data, say so without including any of it. We will reply.
Security is not a finished state, and no software is perfect. This page describes what is in place today and is updated when that changes.
A real person reads these. We usually reply within one business day.