Data Protection & Privacy

Using Shakes lets you capture personal and business information of your clients.

This information is stored securely in a number of ways. 2Shakes places the protection of data and the privacy of information as a top priority in the design and operation of our solution. We adhere to the principal of Privacy by Design – which means that Privacy and protection of data were designed into our solution from the beginning rather than added on at the end. 2Shakes was developed to meet the New Zealand Governments strict requirements for Privacy and Security. 

  • Privacy By Design

    2Shakes started life in a NZ Government accelerator programme. We place the protection of data and the privacy of information as a top priority in the design and operation of our solution. We adhere to the principal of Privacy by Design – which means that Privacy and protection of data were designed into our solution from the beginning. 2Shakes was developed to meet the New Zealand Governments strict requirements for Privacy and Security.

  • NZ Privacy Act

    Requires that you only get asked for the information that is needed by the company you are dealing with. When you use 2Shakes the fields and selections you make only ask for required information. We have also designed our system in a way that prevents inadvertent sharing of private information like IRD numbers across different parties. 2Shakes follows the NZ Privacy Act 2020 to ensure your personal and business information is handled as you would expect and want it to be.

  • Electronic Signature & ID

    2Shakes’ electronic signatures have been assessed by Chapman Tripp to meet the NZ Contract and Commercial Law Act 2017, and are accepted by IRD, ACC, MBIE and any other that has a policy to accept electronic signatures. 2Shakes integrates with Centrix SmartID for electronic ID Verification. If you are being asked for electronic ID Verification, we ask for your consent to send your information to Centrix. For more information please see Centrix SmartID.

  • DIA 105 Questions

    2Shakes has completed NZ Department of Internal Affairs 105 questionnaire on secure cloud computing for government. This again provides an independent confirmation that we are storing client information safely and securely online.

  • ACC Privacy Assessment

    2Shakes has passed a privacy assessment completed by NZ ACC. This provides an independent confirmation that we deal with client private information appropriately

  • Secure and Resilient

    All information is securely protected on Microsoft’s world-class Azure cloud platform. We have resilient geo-redundancy across two datacentres in Australia, maintaining data sovereignty since the information is in a 5-eyes country outside the US Patriot Act.

What you can do to improve security

You should ensure you have robust, up-to-date firewalls and anti-virus software installed on your computers. Keep on top of deleting and destroying old client files, purging folders regularly will minimise build-up. In general sensitive data shouldn’t be kept for longer than necessary.

2Shakes provides technology you can use to improve the security and privacy of client data:

  • 2 Factor Authentication: 2Shakes requires users to set up 2 Factor Authentication (2FA).  Using 2FA dramatically increases your security and reduces the risk that someone could log on to 2Shakes with your user name and password.  Find out more about 2FA here.

  • Identity Verification: 2Shakes will allow you to confirm the identity of your clients during sign up.  Identity verification (IDV) dramatically increases assurance that the person signing is who they claim to be.  We will allow you to verify the electronically by asking the client to submit credentials online, and then validating them against a trusted source.  We even include a Biometric match ensuring a robust link between the person and the Identity they are claiming. Alternatively, you can sign the original document when you meet your client face to face. If you take a photocopy or scan of an identity document we allow for you to upload it to 2Shakes so that the credentials are stored securely in the cloud, rather that having copies of identity papers lying around the office!

If you are unsure of any part of the process, or need further information, email support@2shakes.co.nz.