Your business data, handled with care.
Still holds some of the most sensitive parts of your business, your numbers, your documents, your channel connections. Here is exactly how they are protected, in plain English.
Your accounts connect through keys you control, never your passwords
Your sales come in from the reports you download and upload. Your bank connects through Plaid and Google Drive through its own official sign-in, so you sign in with them, not with us. Where a connection uses an API key, you create the key in that account and can revoke it there at any time. Your store and bank passwords never touch Still.
Sensitive data is encrypted at rest
Your most sensitive files, W-9s, receipts, bank statements and partner documents, are encrypted with AES-256-GCM before they are stored. Channel keys and tokens are encrypted too, and are never kept in plain text. Files are decrypted only when you, or a feature you use, needs to read them: opening a document, reading its details for you, copying it to your Google Drive, or a link you have shared.
Your business is isolated from every other
Every record carries your business's ID. In the database, every table has row-level security turned on and denies access by default. Automated checks run on every change and flag the ways tenant filtering has gone wrong before, and a watchdog re-checks the database's row-level security every day.
Payments are handled by Stripe
All billing runs through Stripe. Your card details go straight to Stripe and are never seen or stored by Still.
You can leave at any time
Disconnect a channel at any time, download everything from Settings as spreadsheets and files, and ask us to delete your account. Deletion happens 30 days after you ask, so you can change your mind. Month-to-month, no contract, and a 30-day money-back guarantee.
What we don't claim
Still is early. We don't have a SOC 2 report or a completed third-party penetration test yet, so we don't display badges for them. When we've earned those, they'll appear here, not before. Until then, the founder answers your security questions personally.
Still is operated by House of Troy Enterprises LLC. See our Privacy Policy and Terms.
Ten founders first. Set up together.
Ten founding places. $49 a month for the first year, then $79. Denise sets up each founder herself.
Request an invitation