Client sites run in isolation
Websites you review load from a separate, locked-down domain, so their code can never reach your account.
Unreleased designs and client websites deserve care. This page explains, in plain words, how we protect them.
You're trusting us with unreleased designs and client websites. Here is exactly how we look after them.
Websites you review load from a separate, locked-down domain, so their code can never reach your account.
Every comment and file is backed up daily and checked for errors before it's stored. We keep 14 days.
Passwords are stored as strong one-way hashes. Reset links work once and expire within an hour.
Every page and file is served over HTTPS, with strict security headers on by default.
Clients' email addresses are never shown to other reviewers. Review links can't be guessed.
Downgrade, pause or cancel, and your reviews stay safe for you to download. No surprise limits added later.
Found a security issue? Email hello@pinpoint.example and we'll respond quickly. Please don't test against other customers' data.
Your workspace details, your team's accounts, the reviews you create (website links or uploaded files), and the comments left on them. Passwords are stored only as one-way hashes.
Clients only give a name. Their email is optional, used only to tell them about replies, and never shown to other reviewers.
The database and uploaded files are backed up daily, checked for errors, and kept for 14 days.
Yes. Delete any review from your dashboard and its comments and files are removed. To delete your whole workspace, email us and we'll do it.
Our hosting provider stores the data, and an email provider delivers notification emails. We don't sell data or use it for advertising.
Create your agency workspace in under a minute. Free while we're in early access, and no card needed.
Your clients never need an account.