Security & Reliability
Your system. Your infrastructure. Your data.
What we actually do to keep your system safe and running. And honestly, what we don't claim to be.
Six things you can hold us to
These aren't marketing promises: they're how every BIZMYZE system is built and handed over.
Hosting in your name
Your system runs on a hosting account you own, opened in your name, billed to you directly. We work inside it as invited users. We never hold the only copy of your credentials, and revoking our access takes you minutes.
Backups
Every system ships with automated daily database backups and a defined retention window agreed in the quote. At handover we run a restore with you, so "the backups work" is something you've seen, not something you're told.
Access control
Role-based user permissions are built into every system: staff see what their role needs, nothing more. The admin account is yours from day one. You add, restrict, and remove users without calling us.
Data privacy
Your data lives in your database on your infrastructure. It is never shared, never sold, and never used to train anything. It's exportable at any time in standard formats. No request forms, no exit fees.
Updates
On the care plan, we patch dependencies and apply security updates as part of the monthly routine. Self-managed clients get clear documentation on what to update, how often, and how, written for any competent developer.
Incident response
Care plan clients get next-business-day response on issues, and we reply to every message within 24 hours. We're a small shop, and that cuts both ways: no 24/7 command center, but no ticket purgatory either. You know who's fixing it.
What we deliberately don't claim
We are a small shop, not a SOC-2-audited enterprise vendor, and we won't pretend otherwise. You will not find compliance badges on this page that we haven't earned.
Here's the honest comparison that matters for most small businesses: the realistic alternative to a BIZMYZE system isn't a hardened enterprise platform: it's spreadsheets shared over email and a dozen SaaS logins on sticky notes. Against that baseline, a single system with role-based access, one login per person, and tested daily backups is a genuine security upgrade, not a compromise.
If your business needs formal compliance attestations (healthcare records, regulated financial data, anything with a legal audit requirement), tell us on the audit call. We'll either scope the work needed to meet your obligations, or tell you plainly that we're not the right fit. We'd rather send you to the right vendor than sell you a false sense of security.
30 minutes. Bring your security questions. You'll get straight answers, including "we don't do that" where it's true.