Your data, sealed with your own key.

A separate, encrypted data vault

The most sensitive records (bills, bank transactions and connections, meter readings, activity records and the documents behind them) are not stored in the main application database. They live in a separate data vault with its own database, and confidential fields are encrypted with a key that belongs to your organisation alone.

The application can only reach the vault through an internal interface that requires signed AWS credentials. Requests without them are rejected, and we check that this is still the case after every deployment.

Where it runs

The application and the vault service run on Amazon Web Services in the London region (eu-west-2). Their databases are hosted by Neon, our managed Postgres provider, each in its own project. All traffic is encrypted in transit with TLS.

Signing in

You sign in with a one-time code sent to your email address, or with your Google account, so there is no Ceresgreen password to leak or reuse. Your session is held in a single secure, HTTP-only cookie; it lasts up to 30 days and is renewed while you keep using Ceresgreen.

Organisations, not individuals

Data belongs to your organisation. Every query is scoped to it, and only people you invite can see it.

Reporting a vulnerability

If you think you've found a security issue, please email hello@ceresgreen.co.uk with "Security" in the subject line and enough detail for us to reproduce it. Please give us a reasonable chance to fix it before telling anyone else. We won't take action against good-faith research.

For how we handle personal data, see our privacy policy.