Security
How Float protects your data · Last updated: August 1, 2026
1. Our approach
Float is built with security in mind from the ground up. We hold the contracts, invoices, and payment records you create, and we treat that data as yours — protected with appropriate technical and organisational safeguards, and always under your control. This page describes the measures we take. It is provided for transparency and does not form part of any contract.
2. Encryption
Data is encrypted in transit using industry-standard TLS between your device and our services. Data at rest is encrypted on the infrastructure where it is stored. We do not transmit your data over unencrypted connections.
3. Access controls
Access to systems and data is restricted on a least-privilege basis: team members receive only the access their role requires, and sensitive operations are limited to a small number of authorised accounts. Credentials are managed securely and access is reviewed periodically.
4. Infrastructure & hosting
Float runs on established cloud infrastructure providers with their own robust physical and network security. Our application and marketing services are isolated from one another, so that public-facing surfaces do not have direct access to sensitive systems.
5. Monitoring & logging
We maintain logging and monitoring to help detect and investigate unusual or unauthorised activity. Logs are retained for operational and security purposes for a limited period.
6. Third-party providers
Where we engage third-party providers (for example, cloud hosting, database, and email delivery), we select established vendors and rely on their security practices in addition to our own. Providers handling personal data are bound to process it only on our instructions, as described in our Privacy Policy.
7. Breach notification
In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals in the form and manner prescribed under the Digital Personal Data Protection Act, 2023 and applicable rules.
8. Your part in security
Security is shared. Keep your account credentials confidential, use a strong and unique password, and notify us promptly if you suspect any unauthorised access to your account.
9. Reporting a vulnerability
If you believe you have found a security vulnerability in Float, we would like to hear from you. Please email us at hello@thefloat.in with details, and allow us reasonable time to investigate and respond before any public disclosure. We appreciate responsible disclosure and will work with you to address valid issues.