Your Data. Your Clients. Here's How We Handle It.
Handl connects to your project management tools, accounting software, and payment flows. That's a lot of trust. Here's exactly what we do with it.
Data Encryption
All data transmitted between you, your clients, and Handl is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256.
Your invoice data, client details, and payment records are never stored in plain text.
Payments
Handl does not store payment card details. Payment processing is handled through [payment processor], which is PCI-DSS Level 1 compliant — the highest level of certification available for payment processors.
When your client pays through the Handl client portal, their card details go directly to the payment processor. Handl never sees them.
Integrations
Handl connects to:
- Monday.com, Asana, Jira, ClickUp, Trello — project milestone data only (we read task/milestone status; we don't access unrelated project content)
- Xero, MYOB — invoice and client data for sync (read/write scoped to invoicing only)
OAuth is used for all integrations — you grant permission through the provider's own auth flow. Handl stores only the access token required for the connected function. You can revoke access at any time from within Handl or directly from the integration provider's settings.
Where Your Data Lives
We do not sell, share, or license your data to third parties. Ever. Your client list, invoice history, and billing data are yours.
Who Can Access Your Account
Only you (and any team members you explicitly invite) can access your Handl account. Our support team can access account metadata for troubleshooting purposes only, with your permission, and only when you've raised a support request.
We don't browse customer accounts for any purpose other than resolving a support issue you've raised.
Compliance
About the Company
Handl is a product of Dazlab Pty Ltd.
If Something Goes Wrong
We monitor Handl's infrastructure continuously. In the event of a security incident that affects your data, we will:
1. Notify affected users within 72 hours of becoming aware of the breach
2. Provide a clear description of what was affected and what we've done about it
3. Cooperate fully with any relevant regulatory authority
Questions About Security
or Data?
Email us at security@handl.works — or use the contact form.
.webp)
