Security and data
The plain version, for a trustee or an IT lead. Everything on this page is in place today; nothing is planned tense.
Separation
Every workspace’s rows carry its own identifier, and the database itself enforces that a request from one workspace can only ever read or write that workspace’s rows. The rule lives in the database, not only in the application code, so a mistake in ours cannot show one charity another’s donations. The consumer product and the charity side share the engine and nothing else.
People
People are invited by email and sign in through Clerk with email, Google or Apple. When someone leaves, an admin disables the account and it stops working immediately. Every decision and every action is recorded against the person and the shop.
Photos and records
A donation’s photos exist to get a price. By default they are deleted immediately after it; an admin can set a number of days to keep them for pieces going to HQ. The price, the shop, the category and the decision are kept, because they are what the pack is made of. Your monthly statements and invoices are kept for as long as the law requires.
At signup, your charity number is checked against the Charity Commission register, and a workspace that cannot be verified is flagged for us to look at by hand.
Who we use
Very Minted is operated by Diocletian Ltd, registered in England and Wales. For a data processing agreement, a security questionnaire or anything a trustee wants answered, email hello@vminted.com.
Next step
A demo walks your retail team through the bench, the HQ queue and the monthly pack on your own kind of stock. The trial gives one shop 100 free price checks with no card and no contract.