Security

Cheques are money. We treat them that way.

Here is, in plain words, how CheqOne keeps your cheques, payees and bank details safe โ€” and who can do what.

๐Ÿ”’

Your data is yours alone

Every record belongs to one customer account, and every database query is filtered to that account. One customer can never see another customer's companies, cheques or payees.

๐Ÿ‘ฅ

Three levels of access

Account administrators manage everything. Company administrators manage one company and its users. Everyone else gets View, Add, Edit and Delete rights per screen and per company. Block anyone instantly.

๐Ÿ–จ

Approved PCs only

Real cheques print only on PCs registered to your account and approved. Previews in the browser are stamped SPECIMEN.

๐Ÿ“œ

Audit trail

Who wrote, changed, printed, cancelled or deleted each cheque, and when โ€” kept with the cheque's history.

๐Ÿšซ

Sign-in protection

Strong passwords required; an account locks for 15 minutes after five wrong tries. Sessions use short-lived tokens.

๐Ÿ”

Encrypted connections

All traffic uses HTTPS. The Print Helper keeps its device key encrypted with Windows data protection on the PC.

๐Ÿงฑ

Hardened by default

Strict content security policy, security headers and rate limits on every public endpoint.

๐Ÿ’พ

Keep the paper trail

Cancelled and deleted cheques stay in the register (with reason) so numbers are always explained.

Report a problem

Found something? Tell us.

If you believe you've found a security issue in CheqOne, please email cheqone@rubiconinfo.com with the details. We'll acknowledge it quickly and keep you updated.

Is my cheque data safe?
Each customer's data is kept separate from everyone else's, every action is recorded in an audit trail, users only see the companies and screens they're allowed to, and real cheques can only be printed from PCs you have approved. Browser previews are always stamped SPECIMEN. Read more on the security page.
Who can see and print cheques?
You decide. Account administrators manage everything; company administrators run one company and its users; other users get View, Add, Edit and Delete rights per screen, per company. Users can be blocked instantly.