Last reviewed 26 Sep 2026

What happens to your data — including what we have not finished.

Most trust pages are a list of reassurances. This one opens with the gaps, by name, because a company that will not print its own will not tell you when something goes wrong either.

A rack of servers lit blue
01 · What is not finished

The table no competitor prints.

Every one of these was true on 10 October 2026, the day this page was last written. When one is finished it moves off this table and into the changelog, dated — it does not quietly disappear.

showing 6 of 6
#What you might assumeWhat is actually trueWhen
01There is an independent security auditThere is not one yet. The code is reviewed by its authors and by an automated gate on every push.Not scheduled
02There is a SOC 2 or ISO 27001 certificateThere is not. We are too new to have paid for either, and a badge we bought is not a fact about your data.Not started
03There is a signed SLAOn Enterprise, yes. On Free and Premium there is no uptime promise in writing.Enterprise only
04Backups are tested by restoring themYes — a restore drill runs on a schedule and the date of the last one is on this page.Done
05There is 24/7 supportThere is not. Office hours, answered by the people who built it.By design
06The company is AmericanIt is Maltese, named below, with the address you can write to, and the data is kept in Germany.By design
— a struck line is what you might assume; the words beside it are what is true.
02 · Your data, and the drill

Your estate, the snapshot, and the drill.

Your book is a file. It is snapshotted nightly, kept off the machine that serves it, and a restore is rehearsed rather than assumed.

You can take the same file yourself, any day, without asking anybody — that is the export, and it is on every plan including Free.

  • Nightly snapshot, kept off the serving machine.
  • A restore drill on a schedule, with the date printed here.
  • Your own export, in one file, on demand, on every plan.
  • Uploaded files are sealed at rest; government IDs are never printed into a circulated paper.
Your data, in one filea demonstration estate · press the button
Nothing has left yet.One button. Every table as a CSV, every uploaded
document as the file it was, and a README.
reading every table in the book
writing one CSV per table
unsealing the uploaded documents
writing the README
⬇premises-takeout-2026-09-26.zipdemo estate
Inside the file
    + 99 more — one for every table the book has
README.txt
03 · The subprocessors

The subprocessors, named — and what each one sees.

Seven, and no more. Each is named with what it is actually handed, because “we use industry-standard providers” is not an answer. Press a layer or a name.

what it is handedselected
Layer

What it is handed

What it never is

04 · The day we are the problem

What we will do the day we are the problem.

Written down now, while it costs nothing to promise, so it can be held against us later.

0 of 5 opened — press a promise to read where it is held
Every affected estate, by name, within 72 hours of us knowing.
An early notice with gaps beats a late one that is tidy.
when it is over, in the changelog, dated, including the part that was our fault.
throughout. Whatever else is broken, the door out stays open.
Write to legal@premises.ph — the same address security.txt names. We answer a security report before anything else in the queue.
05 · Controller and processor

You are the controller. We are the processor.

The GDPR, and the Philippines’ Data Privacy Act where it applies, give each of us a job, and those are the two.

You · the controller

Your tenants’ records are yours.

GDPR Article 24 · the controller

→held for you
Us · the processor

We hold them to run the platform for you.

And for nothing else — not to train anything, not to sell, not to look at out of curiosity.

The standard processing agreement applies on every plan. A negotiated or countersigned one is part of Enterprise, and available on request otherwise.GDPR · and the Data Privacy Act where it applies
06 · The certificate

Yes — this site is certified.

Every page of yourpremises.com is served over an encrypted connection, on a certificate issued by Let's Encrypt. Your browser checks that certificate on every single request — the padlock in your address bar is that check, made by the browser itself and not by us.

A RECORD
What the certificate is

Read from the live connection.

Issued by
Let's Encrypt
Covers
yourpremises.com and every workspace on it
Issued on
14 September 2026
Valid until
13 December 2026

Read from a verified handshake with this host on 1 November 2026, and read again every day — these four lines are this certificate, not a note somebody typed — the live check is the padlock in your address bar.

And the badge

Why there is no badge here

This page used to carry a seal drawn by the certificate’s issuer. The certificate is Let's Encrypt’s now, and Let's Encrypt issues no seal — deliberately, and they have declined to for years. So there is nothing to show, and we would rather say that than borrow somebody else’s badge.

And a certificate is a statement about the CONNECTION between your browser and this site, never a rating of the business behind it. What we do with your data once it arrives is the rest of this page.

07 · The company

A registered company, with an address you can write to.

Web and Cloud Innovation Ltd.
30/1 Kenilworth Court, Sir Augustus Bartolo Street
Ta’ Xbiex XBX 1093, MaltaCompany Reg. No. C106789 · VAT No. MT30594634 · a letter sent there reaches a person
A support agent smiling on a call at her desk

Read the gaps, then decide.

The list above is the reason to trust the rest of this site. Start free under five doors and judge it yourself.

no card  /  every module on  /  free under five doors