Security and data

Last updated 19 October 2026

Where the data comes from

Everything about a company comes from Companies House: its public streaming service, read once an hour for changes, and its public API, checked overnight for every company on a board. Companies House data is public record, used under the Open Government Licence.

What we store

• Your name, email address and practice name, so you can sign in.
• The company numbers on your board, and whether you've marked each change as expected or flagged it.
• A copy of the public Companies House record for each company somebody watches.

We don't ask for, or store, any client personal data beyond what's on the public register, and we never need authentication codes.

Where it's stored

The site and its database run on Netlify. Your board is precomputed and stored so it opens instantly; a copy is kept in your browser on the devices you sign in from, and removed when you sign out.

Who can see it

Only people signed in to your practice. Every request to your board checks your session first. Your client list never appears on a public page: the free company check shows company-level facts only, never a list of who watches what.

Signing in

Sign in with Google, or with a one-time link emailed to you. We never see or store a password. Sessions are signed, HTTP-only cookies that expire after 30 days.

Reporting a problem

If you think you've found a security issue, email security@dueboard.co.uk.