What we do to keep your dock safe

You sign in with an email address and password, or with Google. Every request to our database is checked against the account that made it, so one account can never read another account's records — that rule lives in the database itself, not just in the screens you see.

Specifically, this is what is in place today:

• Documents — verification files, mail scans and vault uploads — are held in private storage. There is no public link to any of them.
• When you open a document, we generate a one-off web address that expires after a few minutes. Nothing is served from a permanent public URL.
• Staff access is split by role, so each person only reaches the records their job needs. A compliance reviewer sees verification submissions, not your billing or unrelated documents.
• Every time a member of staff opens a customer document, it is recorded — who, when and which document.
• Important events across the platform are written to an activity log that can't be edited or deleted from the app.
• Repeated sensitive actions are slowed down: too many failed sign-in attempts, or an unusual burst of document opening, is throttled.
• Traffic between your browser and Founder's Dock is encrypted (HTTPS). Data is stored on managed cloud infrastructure that encrypts data at rest.
• Sign-in sessions are held by the authentication provider, refresh automatically and end when you sign out. Passwords are never stored by us in readable form.
• Payment card details are handled by Stripe. We never see or store your card number.
• API keys and other secrets are kept in server-side secret storage and are never included in the code that runs in your browser.

We don't claim certifications we don't hold. If you need a formal security assessment for procurement, get in touch and we'll tell you honestly where we are.

We ask for the information we need to run the service you've signed up for — and not more. Your compliance items, documents and client records belong to your account and aren't shared with other customers.

We don't sell your information. Where we use other companies to run parts of the service (hosting, payments, email), they process information on our instructions.

The full detail — your rights, how to reach us and how to complain — is in the Privacy Policy.

Before we activate your business address, we need to know who we're providing the service to.

Because our business address service involves receiving and handling business correspondence, we need to verify your identity and business details before activating the service. This helps keep the service safe, professional and compliant.

Verification is a short, five-step form: your personal details, an identity document, your business details, the people who run and own the business, and what you intend to use the address for. You can see exactly where your submission has got to at any time — information required, submitted, under review, approved, more information required, or not approved. Nothing is activated until the status is approved.

The business address service is UK-only. It gives your business a professional registered or trading address, with correspondence received on your behalf rather than arriving at your home.

Founder's Dock business address services are provided through a trusted professional accountancy and business-services partner, with customer verification and mail handling carried out under their established compliance procedures.

You pay for the service first, complete verification, and the address is issued once verification is approved.

Post that arrives for your business is logged on the day it's received: the date, who it appears to be from, and the type of item. Where the service you've chosen includes scanning, it's opened and scanned, and the scan is stored privately against your account only.

You'll get an email letting you know new mail has arrived. That email never contains the contents of your post — you sign in to read it.

Every item carries an internal record of what happened to it and when: received, logged, scanned, uploaded, forwarded. You can ask for an item to be forwarded to you from within your mailroom.

Founder's Dock business address services are provided through a trusted professional accountancy and business-services partner, with customer verification and mail handling carried out under their established compliance procedures.

Broadly, the information we hold falls into these categories:

• Account information — your name, email address and settings, so you can sign in and we know who to contact.
• Compliance and admin records — the items, renewal dates, people and clients you choose to track.
• Documents you upload — certificates, insurance, identity documents and anything else you store in the vault.
• Verification information — the details and documents required to check who we're providing the address service to.
• Mail records — the log of items received for you and, where applicable, the scans.
• Billing information — your subscription and payment status, held with Stripe. We don't hold your card details.
• Activity records — a log of important events, so there's an accurate account of what happened and when.

We keep information for as long as we need it to run your account and to meet our obligations. Exact retention periods are set out in the Privacy Policy as they are finalised. If you want your account and its contents deleted, you can ask us and we will do it.

• Terms of Service
• Privacy Policy
• Cookie Policy
• Business Address Terms