Who
User accounts, roles and staff identifiers help show who completed or reviewed the work.
Trust & security
Food safety records your team—and an inspector—can trust.
TapTick is designed to control who can access your operation, protect data in transit and keep the record of what happened connected to what was done next.
Secure user access
Role-based permissions
Protected connections
Customer-owned records
TapTick approachProtection with clarity
AccessIndividual and role controlled
ConnectionsHTTPS and encrypted transport
InfrastructureEstablished managed providers
Operational evidenceRecords and actions connected
No internet service can promise absolute security. TapTick uses proportionate controls and transparent terms for the data involved.
Trust in the record
Security is only part of the story.
For food safety, a trustworthy system must also make the operational record easy to understand: who completed the work, when it happened, what was found and how an exception was resolved.
When
Timestamps and scheduled work help place each record in its operational context.
What happened
Checks, readings, comments, photos and site events build a clearer account than an isolated tick.
What happened next
Corrective actions, rechecks, manager review and resolutions keep the response connected to the original issue.
Application controls
Access is designed around the site and the person’s role.
TapTick combines individual authentication with site and organisation membership. Staff, managers and administrators receive different capabilities, and sensitive access rules are checked by the application rather than relying only on hidden buttons.
Individual access
Authorised users sign in through managed authentication rather than sharing a public admin area.
Role-based permissions
Operational staff, site managers and wider organisation roles are given access appropriate to their responsibilities.
Site membership checks
Application services verify the user’s permitted sites and roles when protected data or actions are requested.
Invite-controlled onboarding
Teams can be added through controlled invitations and managed from the relevant site or organisation area.
Infrastructure
Built on established specialist services.
TapTick uses managed providers for hosting, application services, database infrastructure, transactional email and payments. This lets us use specialist platforms rather than attempting to reproduce every security capability ourselves.
ApplicationNetlify
Hosts and delivers the TapTick application and runs the server-side functions used by the service.
DatabaseNeon
Provides managed PostgreSQL infrastructure for customer accounts, site configuration and operational records.
Service emailPostmark
Delivers transactional messages such as invitations, alerts and service communications.
PaymentsStripe
Processes payment information and provides billing services without TapTick storing full card details.
Controlled production delivery
TapTick source changes are managed through GitHub and deployed to the production service through Netlify.
Clear about certification scope: some infrastructure providers maintain independent security certifications and assurance programmes. Those certifications apply to the provider and do not mean TapTick itself is separately certified.
Privacy and ownership
Your operational records remain your data.
As between the customer and TapTick, customers retain ownership of the operational data entered into the service. TapTick processes that data to provide, secure, maintain and support the service. We do not sell personal data.
Customer ownershipLogs, photos, comments, records and reports remain customer operational data.
Purpose-limited processingData is processed to operate, secure and support TapTick and meet applicable obligations.
Transparent providersThe main service providers involved in processing are listed publicly.
GDPR documentationPrivacy information and a Data Processing Agreement are available for customer review.
Documentation
Useful information for review and procurement.
The Trust & Security page explains the approach. The legal documents provide the contractual and data-protection detail.
Privacy
Privacy Policy
How personal data is collected, used, shared and retained.
Read policy → InfrastructureSubprocessor List
The principal providers used to deliver the TapTick service.
View providers → GDPRData Processing Agreement
Processor terms for customer organisations using TapTick.
Read DPA → ContractTerms of Service
Customer data, service availability, retention and account terms.
Read terms →Need more detail?
Ask a security, privacy or procurement question.
Tell us what your organisation needs to review and we will respond with the most relevant information available.
Try TapTick in your own site
Start free and see the record for yourself.
30 days free, no credit card required. Then €25 per active site/month, excluding VAT.