Security
Security built into every layer.
We treat your customer data, payment credentials, and operational records as if our business depends on it, because it does. Here's how Tumbly is built.
Your business's data stays private
Each business's data is walled off from every other business. Staff in one business cannot read or change another business's records.
Extra sign-in protection
Admin and finance staff can add a second sign-in step using a verification code. Businesses that require physical security keys can use those too.
A record of sensitive changes
Changes to staff access, credentials, and business settings are recorded in a history that cannot be rewritten. Admins can review these records, which are kept according to your business's retention policy.
Encrypted secure storage
Credentials for Stripe, Accessa, and other connected services are kept in encrypted secure storage. They are never written to activity records or exposed when people view business data.
Your Stripe account stays yours
You manage your own pricing and payouts through your Stripe account. Payouts go to your bank, refunds come from your account, and you control access. Your funds are never mixed with another business's funds.
Data retention
Audit logs and expired invitations are purged on a schedule defined by your organization. Customer data is retained per your contract and deleted on request within 30 days.
Reporting a vulnerability
Email security@tumbly.io with a description and proof of concept. We respond within one business day and credit responsible disclosures.