Mirific
Sign in Book a conversation

Security and privacy

Built to be trusted with the numbers.

Mirific holds a company's plan and its financial figures. These are the controls that protect them, stated as they are built, with nothing added.

Book a conversation Sign in

The controls

  • Each workspace kept separate

    Every request is resolved to the signed-in person's own workspace on our servers, never from what a browser sends, and every read and write is scoped to that workspace. Automated tests try to cross from one workspace to another and must be refused.

  • Encrypted in transit and at rest

    All traffic to the service is encrypted, with strict transport security, and stored data is encrypted at rest.

  • Credentials sealed

    The credentials for each connected system, and each person's two-step sign-in secret, are sealed with envelope encryption under dedicated keys. Every decryption is logged.

  • Two-step sign-in

    Required for Owners and Admins, the two seats that shape the plan, and available to everyone else.

  • Roles that decide what each person sees

    Owner, Admin, Contributor and Observer. Financial figures are read by Owners and Admins, and by anyone they give Financials access.

  • Hosted in the United States

    On Amazon Web Services, in the US West (Oregon) region. We do not offer hosting in another region.

Your data stays yours.

  • Take it or delete it

    An Owner can export the whole workspace, or delete it, from within Mirific, without asking us.

  • Deleted means deleted

    A deleted workspace leaves the live database at once. Encrypted backups are kept for up to 90 days, and then it is gone.

  • Connections you can end

    Disconnect any system at any time. Mirific stops reading, and the connection's credentials are cleared.

  • Not sold, not shared for advertising

    We do not sell your information, and we do not share it for advertising.

The Privacy Policy sets out what we collect, every system we use to run the service, and what each connection reads. The Terms of Service govern the use of Mirific.

Questions from your security review?

Book a conversation and bring them. We answer from how the service is built.

Book a conversation Sign in