Salon Data Security and Cyber Protection
Protect client records and sensitive business information with multi-factor authentication, role-based access levels, approved-device controls, encrypted cloud data and independently tested cyber security measures.
Salon Manager combines identity checks, role-based permissions, approved-device controls, encryption, secure cloud infrastructure and independent security assurance. Each layer addresses a different route by which sensitive information could be exposed.
Protecting sensitive salon and client information
Salon Manager protects the information used across bookings, client records, consultation forms, payments, reporting and multi-location management through controls designed to restrict access, verify users and reduce exposure from unapproved devices or compromised credentials.
Eight security controls and assurance measures
1. Multi-factor authentication
Salon Manager supports multi-factor authentication, requiring an additional verification step so a password alone is not enough to access the account.
Enable MFA for eligible users, especially anyone with access to client data, financial information, reports, settings or administration.
2. Role-based access levels
Salon Manager access levels allow permissions to reflect the user’s responsibilities rather than giving every team member the same visibility and authority.
Limit sensitive functions to the people who need them and adjust access when someone changes role, location or responsibility.
3. Approved devices
Approved-device controls help businesses decide which computers, tablets or other supported devices may be used to access Salon Manager.
Use approved devices alongside individual user accounts and MFA to reduce access from unknown, unmanaged or unauthorised equipment.
4. Encrypted client and business data
Salon Manager uses encryption as part of its cloud security approach, helping protect client and business information from unauthorised access.
Encryption supports the protection of client records, consultation information, business settings and other sensitive data held within the platform.
5. Cyber Essentials certified
Salon Manager is Cyber Essentials certified, demonstrating that core technical controls are in place to help protect against common cyber attacks.
Certification adds an external benchmark to the technical controls used across devices, access, software and network security.
6. Protected client and consultation records
Consultation notes, treatment history, formulas and other sensitive client information can be kept within connected records and restricted through access permissions.
Keeping information inside the appropriate client record reduces reliance on paper notes, local files and uncontrolled copies.
7. Annual penetration testing
Salon Manager undergoes annual penetration testing to identify weaknesses and assess how its technical defences respond to realistic attack techniques.
Regular testing provides another layer of assurance alongside MFA, approved devices, access levels, encryption and security monitoring.
8. Secure cloud hosting, backups and monitoring
Secure cloud hosting, protected backups, monitoring and recovery processes help keep salon information available and support business continuity.
These controls work alongside access security to protect both the confidentiality and availability of salon data.
Start with identity and device trust
A password can be guessed, reused, phished or exposed elsewhere. MFA adds another identity check, while approved-device controls limit access to equipment the business has authorised.
Make access deliberate and accountable
Owners, managers, reception teams, service professionals and multi-location leaders may require different visibility. Salon Manager access levels help businesses control who can view records, run reports, process sensitive actions or change system settings.
Technology and team behaviour both matter
MFA, access levels, approved devices, certification and testing provide strong foundations. Each salon must still manage users carefully, train staff, protect devices and respond quickly to suspicious activity or mistakes.
Use supported, updated devices, lock screens when unattended and avoid leaving systems open in public areas.
Treat unexpected login requests, password resets, attachments and urgent payment messages with caution.
Use strong, unique passwords and never share them through email, messaging apps or written notes at the desk.
Encourage staff to report suspicious activity, mistaken disclosures or lost devices immediately so the business can respond.
A practical starting point for salon owners
Security that scales with the business
As a business adds users, devices, departments and locations, Salon Manager can combine MFA, approved devices, role-based access and location-aware permissions to keep access structured as the organisation grows.
Security controls across the Salon Manager platform
Make security visible in every login and permission
Book a tailored demonstration to explore MFA, approved devices, role-based access levels, encrypted records, Cyber Essentials certification and the wider controls available for your salon or group.
