Security is our top priority. WrkLst follows current industry standards in encryption and security architecture so that your data stays protected at all times.
Encryption in transit and at rest
All communication between you and our servers is fully encrypted, and your data is also encrypted at rest — it remains secure even when it is not actively in use.
Isolated data architecture
Each WrkLst account runs in its own database, giving a strong architectural separation between accounts. Documents and images are stored in dedicated substructures, further improving separation and data integrity.
Authentication and account protection
Every user must set a strong, complex password. Login attempts are protected by throttling and other measures that block automated attacks. WrkLst also supports role-based access control, so you can define user permissions, control what each person sees, and restrict who may export data.
Infrastructure and updates
Our servers run on hardened Linux systems that receive security patches regularly, and the WrkLst software is actively maintained so vulnerabilities are addressed as they arise. System credentials and encryption keys are held in dedicated password and key vaults under strict internal access policies.
Redundancy and backups
To protect against data corruption and disaster we run redundant server and storage systems and take incremental backups of all databases. See How and Where is WrkLst Hosted? for where those systems are located.
AI processing
WrkLst does not use AI on your data without your active, prior consent, and every feature that uses AI is clearly labelled as such. Where AI is used, it runs on open-source models hosted in Switzerland, prompts are never recorded and never used to train models, and AI can be switched off for your entire workspace. See Does WrkLst use AI on my data?.
Secure data migration
If you ask us to migrate existing data from spreadsheets or databases into WrkLst, those files are held on encrypted workstations with strict access controls, and every transfer is encrypted. WrkLst does not use unencrypted transfers under any circumstances.
Related articles
- How does WrkLst Comply with GDPR and Privacy Laws?
- Does WrkLst Provide a Data Processing Agreement (DPA)?
- How and Where is WrkLst Hosted?
If you need further detail, contact us at support@wrklst.art.