Security built into the platform, not bolted on
Because every MyAndGo product signs in through one platform, security is handled in one place and applied consistently to each product you use.
Security is not a feature we add at the end. It is part of how the platform is built, so the same protections apply whether you are signing a document, taking a booking, or managing your team. Handling it in one place means there is one set of controls to understand, and one place to manage them.
We are careful not to overstate this. The points below describe how we protect your information in practice. Where a claim would need an independent certification to stand behind it, we do not make it.
How we protect your information
Encrypted in transit and at rest
Your information is encrypted while it travels between your device and our servers, and encrypted again while it is held, using current industry standard protocols.
Two-factor authentication
Add a second step to sign-in using an authenticator app. Set it up once in your account and it protects every product on the platform, not just one.
Sign-in provider locking
Create your account with Google and it is locked to Google. A sign-in attempt through a different provider for the same email address cannot take it over, which closes a common account hijacking route.
The controls behind your account
- One identity provider for the whole platform, so there is a single, consistent sign-in to secure rather than a different login for every tool.
- Role based access, so people on your team see and change only what their role allows.
- A bank style session timeout on sensitive products, which signs you out automatically after a period of inactivity.
- Sign-in through Google or Microsoft, or a one-time email link, with the provider lock applied from the first sign-in.
- Our team may access your workspace only to support you or to look after the service.
Where your data is kept
For a New Zealand workspace, your documents, records and files are stored in Australia (Google Cloud, Sydney), with your account details also in Sydney and sign-in and payments in the United States. We handle personal information in line with New Zealand's Privacy Act 2020, and our privacy notice sets out what we hold, where, and the services that run elsewhere.