What we do to keep your dock safe

• Data is encrypted in transit with HTTPS, and encrypted at rest by our hosting provider.
• Our database runs in Europe (Stockholm).
• Documents are in private storage. Nothing is public. Download links expire after 5 minutes.
• Each account's data is isolated by database rules. We tested this with multiple accounts.
• Staff access is role-based, and every time a staff member opens a customer file it is logged.
• Team invitations use single-use, expiring links stored in hashed form.
• Uploads are limited to PDF, JPG and PNG up to 15 MB and checked on our server.
• We run no analytics or advertising trackers.
• Two-factor sign-in is available, with stronger password rules and sign-out after 30 minutes of inactivity, plus single-use backup codes.
• AI suggestions are optional, reviewed by you, and capped by plan
• Account owners can download a full data export.
• Deleted items go to a 30-day recovery bin before they are permanently removed.

We believe in being straightforward about where we are. We are currently working on a written incident process. We will update this page when it is live.

If you think you have found a security problem or have had a data incident, email info@myfoundersdock.com.

Certifications: we do not currently hold Cyber Essentials, ISO 27001 or an NHS Data Security and Protection Toolkit submission.

We ask for the information we need to run the service you've signed up for — and not more. Your compliance items, documents and client records belong to your account and aren't shared with other customers.

We don't sell your information. Where we use other companies to run parts of the service (hosting, payments, email), they process information on our instructions.

The full detail — your rights, how to reach us and how to complain — is in the Privacy Policy.

Before we activate your business address, we need to know who we're providing the service to.

Because our business address service involves receiving and handling business correspondence, we need to verify your identity and business details before activating the service. This helps keep the service safe, professional and compliant.

Verification is a short, five-step form: your personal details, an identity document, your business details, the people who run and own the business, and what you intend to use the address for. You can see exactly where your submission has got to at any time — information required, submitted, under review, approved, more information required, or not approved. Nothing is activated until the status is approved.

The business address service is UK-only. It gives your business a professional registered or trading address, with correspondence received on your behalf rather than arriving at your home.

Founder's Dock business address services are provided through a trusted professional accountancy and business-services partner, with customer verification and mail handling carried out under their established compliance procedures.

You pay for the service first, complete verification, and the address is issued once verification is approved.

Post that arrives for your business is logged on the day it's received: the date, who it appears to be from, and the type of item. Where the service you've chosen includes scanning, it's opened and scanned, and the scan is stored privately against your account only.

You'll get an email letting you know new mail has arrived. That email never contains the contents of your post — you sign in to read it.

Every item carries an internal record of what happened to it and when: received, logged, scanned, uploaded, forwarded. You can ask for an item to be forwarded to you from within your mailroom.

Founder's Dock business address services are provided through a trusted professional accountancy and business-services partner, with customer verification and mail handling carried out under their established compliance procedures.

Broadly, the information we hold falls into these categories:

• Account information — your name, email address and settings, so you can sign in and we know who to contact.
• Compliance and admin records — the items, renewal dates, people and clients you choose to track.
• Documents you upload — certificates, insurance, identity documents and anything else you store in the vault.
• Verification information — the details and documents required to check who we're providing the address service to.
• Mail records — the log of items received for you and, where applicable, the scans.
• Billing information — your subscription and payment status, held with Stripe. We don't hold your card details.
• Activity records — a log of important events, so there's an accurate account of what happened and when.

We keep information for as long as we need it to run your account and to meet our obligations. Exact retention periods are set out in the Privacy Policy as they are finalised. If you want your account and its contents deleted, you can ask us and we will do it.

• Terms of Service
• Privacy Policy
• Cookie Policy
• Business Address Terms