Skip to content
Tools to Pay

Tools to Pay

Security & responsible disclosure

Company-specific access

Tools to Pay uses signed-in accounts, company memberships and database access policies to separate workspace records. Privileged provider credentials belong on the server, not in customer-facing pages or messages. These controls do not justify a claim that any software is risk-free.

Keep shared links private

Customer quote, contract and calendar links can grant access to the intended information. Share them only with their intended recipients. Do not publish them in public pages or blog posts.

Report a concern

Email hello@toolstopay.com with the affected page and a minimal description. Do not send secret keys or other people's personal data. Do not access additional records, interrupt the service or publish a vulnerability before a responsible discussion. This is not a paid bug-bounty programme.