Security at Stitch Storage

Access controls

• Each person signs in with their own account. You choose who can see your facility.
• Roles limit what people can do. Owners, managers, staff and accountants each get only the access their job needs.
• Your facility’s data is separated from every other customer’s at the database level.
• Multi-factor sign-in is available for accounts.

Data in transit and at rest

• Connections to stitchstorage.com and the Stitch app use encryption (HTTPS).
• Passwords are stored in protected form, never as plain text.

Payments

Card payments are handled by Stripe. Card details go to Stripe, and we do not store full card numbers. Stripe’s own security program covers the card data it processes.

Where your data lives

Stitch is hosted and operated in the United States. Our service providers are listed in the Data Processing Addendum.

Your control

You can export your data at any time. See the Privacy Policy for what we collect and how long we keep it.

Certifications

We do not claim certifications we do not hold. If that changes, we will list them here.

Report a security issue

If you think you have found a vulnerability, email support@stitchstorage.com with the subject “Security” and enough detail to reproduce it. Please do not access other customers’ data or disrupt the service while testing. See the Acceptable Use Policy.