Scam alerts, practical guides and honest opinions - filtered to what’s relevant for you.
Write the callback rule down before you're on the phone at 4:40pm on a Friday.
Shared logins, no encryption, no device management. The yards are where certification stalls.
Information about children carries a higher bar. Three practical changes that satisfy most of it.
Your booking system holds names, numbers and card tokens. What to check today.
Default passwords, no updates, and your till on the same network.
Passports and payslips, kept forever, in a mailbox five people can open.
Recurring payments and medical notes, held together, kept for years.
Long retention, sensitive family records, and payments taken at the worst moment of someone's life.
Tenant data spread across three systems and two WhatsApp groups.
Dual approval on new payees is the single control that survives a bad Friday.
Client galleries, model releases and 400GB in exactly one place.
Pre-answered questions, evidenced, so a volunteer isn't guessing at midnight.
One device holds your income, your customers and your bank. Three settings to fix.
Locums, shared logins and clinical records at 3am.
Forty-seven external opens from four countries, and nobody knew.
Grant logins, machine telematics, and a signal that drops when it rains.
Allergies, medication, pregnancy. Higher bar than most salons realise.
Physical access is data access when the office has paperwork on the desks.
Health notes in a booking system designed for haircuts.
Special category data on a system the supplier hasn't updated since 2023.
Site photos on five phones, and a client asking for last March's job.
No passcode, no encryption, no way to wipe it when it goes missing.
Free tiers usually permit training on your uploads. Paid ones usually don't.
Recovery rates, insurance conversations, and why the register matters more than the tag.