Security at sush.io

Your financial data is some of the most sensitive information you handle. Protecting it isn't a feature we bolted on — it's how sush.io has been built from day one. Below is an overview of the measures we use to keep your data safe.

Read-only access

sush.io only needs to read your payment data to sync it into QuickBooks Online. Wherever a provider supports it, we request read-only scopes, so sush.io can never move money, issue refunds, or alter charges on your behalf. You stay in full control of your Stripe, Etsy, Braintree, and QuickBooks accounts.

Encryption in transit and at rest

All data exchanged between your browser, our servers, and the platforms we connect to is encrypted in transit using industry-standard TLS. Sensitive data stored on our systems is encrypted at rest. We implement industry-standard security measures to protect your personal information at every step.

GDPR compliance by design

Privacy is designed into the product, not added afterwards. Depending on your location, you have the right to access, correct, delete, restrict the processing of, and port your personal data. You can exercise these rights at any time by contacting us at support@sush.io. For full details, see our Privacy Policy.

Trusted infrastructure and providers

We rely on established, security-vetted third-party providers for hosting, payment processing, data analysis, and email delivery. We connect to your accounts through the official APIs of the platforms we integrate with, using their supported authentication and authorization mechanisms.

Duplicate control and data integrity

Smart matching prevents double entries, so your books stay clean and audit-ready. Keeping your synced data accurate and consistent is part of how we protect the integrity of your financial records.

Responsible disclosure

We take reports of security issues seriously. If you believe you've found a vulnerability or have a security concern, please contact us at support@sush.io so we can investigate and respond promptly.

A note on absolute security

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We continuously work to strengthen our safeguards and address technical issues, fraud, and unauthorized activity.

Questions?

If you have any questions about how we protect your data, please reach out: