How EasyGrox Protects Your Salon’s Data
Enterprise-grade security for your salon business data, client database and financial records.
AES-256 Encryption at Rest
All data stored in EasyGrox databases — client records, appointments, financial data — is encrypted using AES-256. Even in the event of physical server compromise, data is unreadable without the encryption keys.
TLS 1.3 Encryption in Transit
All data transmitted between your device and EasyGrox servers uses TLS 1.3 — the most current transport security standard. Your data cannot be intercepted in transit.
Role-Based Access Control
Each staff member can only access the data their role requires. Owners see everything. Front desk staff see bookings and billing. Staff members see only their own schedule. Access is enforced at the database level.
Daily Automated Backups
Your entire business data is backed up daily with 30-day retention. In the event of data loss, we can restore to any point within 30 days.
Audit Logs
All data access and modification events are logged with timestamps, IP addresses, and user identifiers. You can request an audit log for your account at any time.
Regular Security Audits
EasyGrox undergoes independent security audits quarterly. Critical vulnerabilities are patched within 24 hours of discovery. Non-critical patches are deployed in the next scheduled release.
Secure Booking Website Hosting
Your free EasyGrox booking website is served over HTTPS with automatic SSL renewal. Client booking data is never stored in browser storage — all transactions go directly to our secure servers.
Incident Response
In the event of a security incident affecting your data, we notify you within 72 hours with details of what occurred, what data was affected, and what steps we have taken to remediate.
Responsible Disclosure
Found a security issue? Email [email protected] with steps to reproduce and potential impact. Do not access or modify data that is not yours during investigation. We acknowledge all credible reports within 48 hours.