🔒Encrypted
In transit & at rest
🇬🇧UK Only
Azure UK data centres
🏠Data Isolation
Your data, only yours
📋Audit Log
Every action recorded
👥Role Access
Staff see only their data
🗑️Right to Delete
Deleted in 30 days
ShahoSuite runs entirely on Microsoft Azure — the same infrastructure used by the NHS, UK government departments and major banks. Your data never leaves the United Kingdom.
🔵 Azure Infrastructure Details
Cloud Provider
Microsoft Azure
Data Region
UK South / UK West
Data Location
United Kingdom only
Encryption
TLS 1.2+ in transit
Compliance
ISO 27001 · SOC 2
Email Delivery
Azure Communication Services
Every ShahoSuite account is completely isolated from every other account. There is no way for one business to see another business's data.
🏠Account Isolation
Your customers, invoices, orders and staff are completely separate from all other ShahoSuite accounts. No shared data pools.
🔐Authenticated Access Only
All data requires authentication to access. No anonymous access, no public endpoints exposing your data.
🔒Encrypted Storage
All data stored using AES-256 encryption at rest on Azure. Even physical access to servers cannot read your data.
🚫No Data Sharing
Your data is never sold, shared with third parties, or used for advertising. It exists solely to run your ShahoSuite account.
Not everyone on your team needs to see everything. ShahoSuite enforces strict role-based access — the Director controls what each staff member can see and do.
Invoices & Credit Notes
✓
✓
Analytics & Accounting
✓
View only
Settings & Business Profile
✓
✗
ShahoSuite records every action performed in your account — who did it, when, and what changed. The Audit Log is visible to the Director only and cannot be deleted or altered.
2026-03-18 14:30
System
CREATE
payment
› View changes
2026-03-17 15:56
admin@shahosuite.com
DELETED
customer
› View changes
2026-03-11 00:22
admin@shahosuite.com
CREATED
invoice
› View changes
Every record shows the exact timestamp, user email, action type and the entity affected. The Director can see all staff activity. Staff cannot see the Audit Log.
📅Active Accounts
Data retained for the duration of your active subscription. Nothing deleted without your instruction.
🗑️After Cancellation
All personal and business data is permanently deleted within 30 days of cancellation.
📊Financial Records
Anonymised financial records retained for 6 years for HMRC compliance — no personal data retained.
📤Export Before Leaving
You can export all your data as CSV before cancelling. Your data always belongs to you.
👁Right to Access
Request a full copy of all data we hold about you and your business. We respond within 30 days.
✏️Right to Rectification
Request correction of any inaccurate personal data we hold. Most data can be corrected directly in Settings.
🗑️Right to Erasure
Request deletion of your data at any time. Cancel your account and all data is deleted within 30 days.
📤Right to Data Portability
Export all your data as CSV from any module at any time. Your data is always yours to take.
🚫Right to Object
Object to processing of your personal data in certain circumstances. Contact us at admin@shahosuite.com.