Security
Your clients’ data stays on your server.
Cliezoo is self-hosted by design. Security, privacy and the e-signature audit trail are part of the free plugin, never a paid extra.
Data ownership
- All data stays in your WordPress database
- Full workspace export to JSON
- WordPress personal-data exporter and eraser
- No telemetry without opt-in
Account security
- Two-factor authentication (TOTP) with recovery codes
- Passkeys and magic links
- Session list and log out everywhere
- Require 2FA per role, new-login alerts
Access you control
- Built-in roles including Contractor and Read-only
- Per-object sharing with "who has access and why"
- Access inventory with bulk revoke
- Audited impersonation with a visible banner
Protected sharing
- Public links with passcode, expiry and revoke
- Access logs and view counts
- Private file storage with signed downloads
- Audit log of every change
E-signature evidence
- Timestamps, IP and device for every signature
- SHA-256 document hashes
- Audit certificate and tamper-evident final document
- Email one-time code identity check
AI safety
- AI drafts; you approve
- Sensitive agent tools off by default
- Every AI action logged; kill switch for agents
- Encrypted provider keys and local-model option (Pro)
How we build
Reviewed at every milestone
Each Cliezoo release goes through dedicated security, QA and WordPress.org compliance reviews before it ships, covering SQL injection, access control, file handling, XSS and secrets.
Found a vulnerability? Email hello@degird.com.
Frequently asked questions
Can’t find your answer? Read the docs or ask the Degird team.
Read the docs → Contact us →Where is my client data stored?
In your own WordPress database and private file storage on your server. Cliezoo and Degird do not receive your client data.
Does Cliezoo send data to AI providers?
Only when you use an AI feature, and only the context needed for that request, to the provider you configured. You can turn AI off per module or per role, and Pro can use a local model.
How do I report a security issue?
Email hello@degird.com with the subject [Security Disclosure]. Please include steps to reproduce.
Run your whole client business from WordPress.
Install the free plugin in minutes. No caps, no trial, no credit card. Upgrade to Pro when you want autopilot.
