Security Policy

Our commitment

We handle sensitive business and personal information — formation documents, identification, and financial data. Protecting it is a core part of our service.

Technical safeguards

• TLS encryption for all data transmitted to and from our website and client portals.
• Least-privilege access: team members only reach the records their work requires.
• Multi-factor authentication on business-critical accounts.
• Reputable, security-reviewed vendors for hosting, email, storage, and payments.

Payment security

Card payments are processed by PCI-compliant providers. We never store full card numbers or CVV codes on our systems.

Operational practices

• Documented onboarding and offboarding of team access.
• Regular review of user accounts and permissions.
• Secure disposal of documents no longer required for legal or contractual reasons.

Incident response

If we identify unauthorized access to client data, we investigate immediately, contain the issue, and notify affected clients along with any legally required disclosures.

Responsible disclosure

If you believe you have found a vulnerability in our website or systems, please email security@startmybusiness.biz with details so we can investigate. We ask that you avoid accessing or modifying other users' data while testing.