Secure Ticket Data is a WHMCS addon module that gives support teams a dedicated place for sensitive data that customers must share during a ticket, such as login details. It provides a separate Secure Data area on the ticket, role based access for staff, configurable automatic deletion, activity logging, and encrypted storage as described in its documentation.
Keep sensitive data out of the ticket message
Ask customers to place sensitive details in the Secure Data field instead of the normal ticket message or a reply. Do not treat the regular ticket conversation as the place for credentials or other sensitive support data.
Limit who can view secure data
- Grant access to the Secure Data area only to the admin roles that need it. Review role assignments when staff change duties.
- Configure automatic deletion so secure entries are kept only as long as they are needed.
- Review the module's activity log regularly for unexpected access.
Plan for recovery
Decide in advance how your organization recovers access to encrypted entries if keys, staff or installations change. Test that plan before you depend on the module for urgent credentials.
What this module does not do
The module supports a security and data minimization program. It does not by itself make a business compliant with GDPR, PCI DSS, ISO 27001 or any other law or standard, and encryption alone does not remove risk. Copies of sensitive data can still exist elsewhere in an installation, for example in old ticket messages or backups, so keep your wider retention and backup practices under review.
