Where your data lives and who can reach it

Paddl stores your data in London (Neon PostgreSQL and AWS ECS in eu-west-2, Vercel in lhr1), encrypts it in transit with TLS and at rest with AES-256 at both the database and the file store, takes daily backups with point-in-time restore, and scopes every record to your business with owner, manager and staff roles. Paddl itself holds no security certification; the certifications named below belong to the providers that hold them.

Last reviewed 9 September 2026. Questions: info@paddl-ai.co.

Where your data lives

Database

Neon PostgreSQL in AWS eu-west-2 (London).

Application

The API runs on AWS ECS in eu-west-2. The web apps run on Vercel in lhr1 (London).

Files and photos

Cloudflare R2 object storage. Uploads are served through signed URLs, not public links.

Leaving the UK

Some subprocessors below process data outside the UK. Where they do, transfers rely on the UK international data transfer addendum.

Encryption

In transit

HTTPS everywhere. Every database connection requires TLS (sslmode=require with channel binding), so nothing moves between the app and the database in the clear.

At rest

Neon encrypts stored data with AES-256, and Cloudflare R2 encrypts every object with AES-256, both per their own documentation.

Connector tokens

Third-party access tokens, such as your Square connection, are encrypted in the database with AES-256-GCM under rotatable keys, bound to the row that holds them.

Passwords

Hashed, never stored. Nobody at Paddl can read your password or recover it for you.

Backups and recovery

Backups

Taken daily.

Point-in-time restore

Neon keeps a continuous history on top of the daily backup, so the database can be restored to a moment rather than only to last night.

Your own copy

You can export at any time: the EHO audit pack as PDF, and your records as PDF or CSV. Cancel and your data stays available for 14 days before deletion.

Who can see what

Roles

Owner, manager and staff. Owners see every location. Managers see the locations they are given. Staff see their own.

Separation

Every record belongs to a business and a location, and every query is scoped to the signed-in user’s business.

Audit trail

Records show who completed them and when. Administrative actions are written to an audit log.

Not yet available

There is no two-factor authentication or single sign-on today. If either is a requirement for you, tell us and we will tell you where it sits.

Your rights under UK GDPR

Controller and processor

For your staff and business records you are the controller and Paddl is the processor. For your own account details Paddl is the controller.

Access, correction, deletion

Email info@paddl-ai.co and we will answer within a month, usually far sooner.

ICO registration

Registered with the Information Commissioner’s Office, reference ZC001383.

Complaints

You can complain to the Information Commissioner’s Office at ico.org.uk.

More detail

The privacy policy covers lawful bases, retention periods and cookies.

Subprocessors

The companies that process data on Paddl's behalf. We will update this page before adding another.

Who you are dealing with

Legal entity

Trading Projects Ltd, a private limited company registered in England, company number 16456940, trading as Paddl.

Registered office

2 School House Gardens, Loddiswell, Kingsbridge TQ7 4SH, England

Reporting a vulnerability

Email info@paddl-ai.co with the detail. We will confirm within two working days and tell you what we are doing about it. Please do not test against other customers' data.

See also the privacy policy and the terms of service.