BN AI Agent
Hello! I’m here to help you navigate Booknip. Tell me what you need, or choose one of the suggestions below.
Available now
SECURITY · PRIVACY · COMPLIANCE
Booknip trust centre
How Booknip protects your accounts, data and payments. This page describes controls in place today and the certification roadmap; it does not claim certifications that have not been awarded.
Account protection
- Authenticator-app two-step verification, required for administrators and partners
- Account lockout and per-address rate limits on every sign-in route
- Sign-in with Microsoft or Google
- All sessions end when a password is reset or access is removed
Operational controls
- Granular administrator permissions with independent approval of price, payment-gateway, tax, partner-fee and access changes
- Append-only, hash-chained audit trail of privileged and financial events
- Encryption keys shared across servers and protected at rest
- Secrets held outside source code in a vault or environment configuration
Payments and invoicing
- Cards are handled by the payment provider; Booknip stores only a token and the last four digits
- Signed, time-limited payment notifications with replay protection
- Sequential tax invoices and credit notes with tamper-evident document hashes
Privacy
- Analytics only with your consent
- Self-service data export and erasure requests
- Automatic deletion of sign-in codes, reset links and analytics on a fixed schedule
- Privacy Notice, Data Processing Agreement and sub-processor list
Certification roadmap
Booknip is preparing for an ISO/IEC 27001 certification audit, followed by a SOC 2 Type II report. Ask your Booknip contact for the current status and the security questionnaire pack.
Service status
- Website and marketplace · Operational
- Customer and partner portals · Operational
- Payments · Operational
- E-mail delivery · Operational
- Product sign-in and APIs · Operational