Security
Plain language on isolation, payments, learning, consent, and who we work with — no fake compliance badges.
Cleriyo runs in the Sydney region — your books are stored and processed on Australian infrastructure (AWS and GCP in Sydney, via Vercel and Supabase). One exception: inbound email you forward is routed through our email provider in the US before it lands in your Sydney-hosted account.
Your company data is isolated per business. Practice staff only see the clients they're invited to look after — when practice tools ship.
We never store card numbers. Checkout and subscriptions run through the payment provider for your market.
Cleriyo gets better at familiar suppliers without sharing anyone's private invoices across firms. Corrections stay with your business.
Where we ask for broader learning consent, you can opt out. Details live on our Data & AI consent page.
Data & AI consentWe use trusted providers for hosting, auth, email, AI, and billing. The current list is on Legal.
Sub-processorsYou can request deletion of your business data. Retention windows follow our privacy policy — written for operators, not lawyers only.
PrivacyINFOG-12 · Your data, handled