When the Data Is Your Customers', Not Yours

A small online shop, a freelance designer, a two-person agency, a family business selling through a marketplace: most of them work wherever the connection is. A co-working desk, a rented office with shared Wi-Fi, the café downstairs. The difference from personal browsing is that the information passing through is not only yours. It is your customers' orders, your suppliers' prices, your clients' files.

What an Open Network Sees

Your device sits on a local segment with everyone else on that Wi-Fi. Traffic that is not encrypted end to end is readable by them and by whoever administers the router.

HTTPS handles the contents. Order details, invoices, chat with a supplier, the marketplace dashboard you log into — those are encrypted between you and the service.

What is left in the open is the business itself. The network sees the name of every service you connect to, how much data moved, and when. That is enough to work out which marketplaces you sell on, which payment processor you use, which logistics provider handles your shipments, which clients you were working for last week and how busy you were. A competitor at the next desk does not need to read a single invoice to learn most of what they want to know.

What Encryption Covers

A VPN puts the whole session inside one encrypted tunnel to a server you choose. The shared router sees one connection to one address and nothing about the traffic in it. Service names, volumes and timings stop being observable from the room.

Where it stops, stated without decoration:

• It protects data in transit. It does not secure a laptop that already has malware on it, and it does not help if a staff member types the company password into a fake login page.
• It does not make you anonymous. It relocates the trust: the office network no longer sees your destinations, and your VPN provider is in a position to. A no-logs policy is the claim that matters, and it should be one you can verify.
• It does not replace the basics. Unique passwords, two-factor on the marketplace and payment accounts, and a locked screen do more for a small business than any tunnel.
• It does not change what is permitted. Indonesia applies category-level content filtering through the publicly documented Internet Positif programme. That is policy, and a privacy tool has no bearing on it.

The Honest Case

The case for a VPN in a small business is narrow and solid: you routinely work on networks you do not control, and the metadata of that work describes your customers as much as it describes you. Encrypting it is cheap, lawful and dull — which is what good security usually looks like.

Doft VPN

Doft VPN gives you every server location free, with no paywalled regions. It uses modern cryptography and keeps a stable connection on the shared and congested links that co-working spaces and rented offices tend to have. It keeps no logs of your activity, and connects in one tap on Android and iOS. Premium adds higher speeds and raises the data allowance; the privacy features are free, because a security tool that only protects people who pay is not much of a security tool.