Data security & access controls

Salon software security. Protect client data.

Salon Manager helps protect client records, consultation details and business data with two-factor authentication, role-based permissions, device approval and encryption. Cloud hosting, backups and monitoring support availability and recovery. Cyber Essentials certification and annual independent penetration testing provide additional assurance.

Book My Tailored Demo Explore the features ↓

A personal walkthrough • UK support • No obligation

The workflow

Protect the sign-in

Two-factor authentication

Choose the access

Permissions shaped around the person’s role

Control the device

Approved devices for system access

A simplified view of the controls around system access.

15,000+people using Salon Manager

30+ yearsof experience in salon management software

UK supportonboarding, training and ongoing help

Eight security controls

Which security controls are built into Salon Manager?

Two-factor authentication (2FA)

Add a second verification step at sign-in to reduce the risk of someone getting in with a stolen password.

Device management

See which devices are authorised to access Salon Manager. Require approval before a new or unrecognised device can connect.

User permission levels

Choose what learners, tutors, reception staff and managers can view or change. Limit access to the information each role needs.

GDPR compliance support

Use permissions and device controls to limit access to personal data. Your organisation remains responsible for how it handles that data.

Encrypted data

Encryption helps protect client records, consultation details and business information during supported storage and transmission.

Cyber Essentials certification

Salon Manager is Cyber Essentials certified. Ask for the current certificate when your IT team reviews the platform.

Annual penetration testing

Independent annual testing looks for security weaknesses so they can be identified and addressed.

Cloud hosting, backups and monitoring

Cloud hosting and monitoring support availability. Protected backups support recovery if data or services are disrupted.

Your team’s responsibilities

What does your team need to manage?

Area	Salon Manager controls	Your salon’s role
Sign-in	Two-factor authentication adds another verification step.	Use individual accounts and protect sign-in details.
Staff access	User access levels restrict relevant areas.	Choose permissions and review role changes or leavers.
Devices	Approved-device controls help manage access.	Keep devices updated, locked and under review.
Information	Encryption and platform security controls reduce exposure risk.	Handle client information carefully and report concerns promptly.

Salon Manager provides the controls. Your team sets permissions, manages approved devices and reviews access when staff join, change roles or leave.

Make it work your way

How should a salon review staff and device access?

01

List people and responsibilities

Review who needs access and which tasks each role performs. Include managers, reception, practitioners and any central team.
02

Check permissions and devices

Apply suitable access levels, review approved devices and confirm the sign-in controls used by your team.
03

Review when things change

Revisit access after staff changes, lost devices or a suspected incident. Train the team to report concerns promptly.

Salon software UK

What should you ask a salon software provider about security?

For a supplier review, ask for the current Cyber Essentials certificate, the scope of independent testing, and details of hosting, backups and recovery. In a demo, ask to see what happens when a new device connects or a staff member leaves.

For colleges and multi-location groups, check how role and site permissions work together before giving learners, staff or managers access.

For the wider salon software system, compare packages and inclusions and see the full feature range.

For independent background, read the NCSC explanation of Cyber Essentials. This explains the scheme; it is separate from your own review of Salon Manager’s current assurance information.

If you choose an AI salon receptionist, include its handling of client information in your wider data review. Ask about access, call-recording settings and retention before agreeing the setup.

Frequently asked questions

Salon Manager data security FAQs

Answers for salon owners, college IT teams and multi-location managers.

Have a workflow we have not covered? Talk it through in your demo.

Does Salon Manager support two-factor authentication?

Yes. Two-factor authentication adds another verification step to help reduce the risk of unauthorised access when a password is compromised.

Can we control what team members can see?

Yes. User access levels help you restrict what people can view or change. Your salon chooses permissions based on each person’s role and responsibilities.

Can we choose which devices can access Salon Manager?

Yes. Approved-device controls let the business manage trusted devices. A new or unapproved device can require approval before access is allowed.

Is Salon Manager Cyber Essentials certified?

Salon Manager is Cyber Essentials certified. You can ask the team for current certification details as part of your supplier review.

Is penetration testing carried out?

Salon Manager uses annual independent penetration testing to look for vulnerabilities. Ask the team about the assurance information available for your review.

Does salon software make a business automatically GDPR compliant?

No. Software controls support data protection, but your business remains responsible for lawful handling, appropriate access, policies and staff practices. Review requirements relevant to your services.

What should staff do with a suspicious message or lost device?

Report it promptly through your salon’s incident process and contact support where relevant. Avoid following unexpected login links or sharing passwords in messages.

How do security controls connect with client records?

Access controls help protect the client information held in your salon CRM, including forms and history. Choose suitable permissions and review who needs each type of information.

How does Salon Manager support recovery after a disruption?

Salon Manager uses cloud hosting, monitoring and protected backups to support availability and recovery. Ask the team about backup and recovery arrangements for your supplier review.