ApprovalMax policies and safety measures for data security

Once a year, ApprovalMax goes through a 3rd-party penetration test. Additionally, we perform regular internal self-assessments. Details can be shared once an NDA has been signed

ApprovalMax has a 98/100 score on the automated security scanning system. Details can be shared once an NDA has been signed
​

ApprovalMax is certified according to ISO 27001:2022 (establish, implement, operate, monitor, review, maintain and continually improve an information security management system)
​

ApprovalMax is GDPR compliant

This is how ApprovalMax handles Data Protection and Data Recovery

ApprovalMax supports 2FA via the TOTP standard

ApprovalMax supports the system logout after 15 minutes of inactivity

For periodic reauthentication and enhanced system security, ApprovalMax supports a 24-hour token expiration
​

ApprovalMax is compliant with Xero and Intuit security standards

ApprovalMax supports Xero SSO, QuickBooks Online SSO, Google SSO, Microsoft SSO

ApprovalMax supports Xero OAuth 2.0 and QuickBooks Online OAuth 2.0​
​
​

Here is the ApprovalMax password policy. We do perform strong checks and automated checks against the list of compromised passwords. In case of multiple (6) failed login attempts, users are locked out for 30 minutes
​

Here is the ApprovalMax Privacy Policy
​

Here is the ApprovalMax Cookie Policy
​

Here is the ApprovalMax Data Retention and Destruction policy

ApprovalMax has a Data Security Policy. Details can be shared once an NDA has been signed
​

ApprovalMax has a standard incident response plan as per the ApprovalMax Data Security Management Policy. Details can be shared once an NDA has been signed
​

Here are the ApprovalMax Terms and Conditions in full
​