Security &
privacy.

The facts

Legal entity

Monthpost is a product of ALIENTECH LTD

Registered in

Cyprus, company number HE 353383

VAT number

CY10353383S

Registered address

7 Thiseos, 2042 Strovolos, Nicosia, Cyprus

Data protection contact

support@monthpost.com

Governing law

Cyprus

Sign-in

An email link plus a one-time code. There is no password to steal, guess or reuse.

Our approach

We apply technical and organizational safeguards to protect accounts, documents and service data against unauthorized access, alteration, loss or misuse.

We review these safeguards as Monthpost develops and make security part of the way we operate the service.

Access and permissions

Access to Monthpost is intended for authorized users. Firm administrators manage their workspace, invite users and control access to client areas. Monthpost uses those permissions to determine what each person can view.

Users should review access regularly and remove it when it is no longer needed.

Account safety

Keep your email account, devices and Monthpost sessions secure. Do not share account access and sign out when using a shared or untrusted device.

Tell us promptly if you believe an account has been accessed without permission.

Documents and sharing

Documents uploaded to Monthpost are intended to be private and available only to authorized users. Firms control what they upload, publish and share with their clients.

Users are responsible for choosing the correct recipients and for having permission to upload and share the information involved.

Your documents are not training data.

We do not use client documents, package contents or firm activity to train AI models, ours or anyone else’s. We do not sell them and we do not share them for advertising.

Service safeguards

We maintain safeguards for access, service operation and responsible data handling. Access to service data is limited to authorized people with a legitimate operational need.

Activity and privacy

Monthpost may keep limited account, service and document activity needed to provide features, support users and protect the service.

Our Privacy Policy explains the categories of information we process, why we use them and the choices available to individuals.

Retention and response

We retain information only for as long as reasonably needed to provide the service, meet legal obligations and handle legitimate security or support needs.

We respond to issues that may affect personal data and provide notice where required by applicable law.

Using Monthpost safely

A few clear habits help keep firm and client information in the right hands:

• Give access only to people who need it and remove access when their role changes.
• Check recipients before publishing or sharing documents.
• Keep your email account and devices secure.
• Do not share account access.
• Contact us immediately if you see unexpected access or activity.

What we do not claim.

Monthpost is built by a small team. We do not hold SOC 2 or ISO 27001 certification and we are not going to imply that we do.

What we can do is tell you exactly how the service is built and operated and answer any question about it in writing. If your firm needs a specific control in place, email us and we will tell you the same day whether we have it.

Contact us

For security questions or help with unexpected account activity, contact us directly.