You work with people, not numbers. Here is how we protect their data.
The database is in Ireland, in the European Union. The application runs in Dublin, and backups are kept there too.
All connections are encrypted (TLS). Data is also encrypted at rest. Backups have their own encryption, with a key kept outside the application.
A full copy is made every night and kept for 30 days. Every week, the system automatically checks that a copy can be restored.
Coaches have two-step authentication. Each coach sees only their own clients, and each client only their own space. Links sent to clients are unique and cannot be guessed.
Errors reach the technical team immediately, with no personal data in the alert.
Card payments go through Stripe. We never see or store card details.
AI features send the necessary text to Anthropic only when you use them. Anthropic does not train its models on this data. Clients give their consent separately.
You are the controller of your clients' data, and we are the processor. The DPA is ready to download and contains the full list of providers. Data export and account deletion are done from the app.
Write to us at office@x2coach.com. We respond and fix it as a priority.