Security & trust
Your book of business.
Not ours.
Full export any time, no exit fee, and per-client authorisation on every connector. Here is what we do, plainly, including the parts that are still in progress.
What we do
Encryption
TLS 1.3 in transit, AES-256 at rest, on infrastructure in US regions.
Access control
Role-based permissions, SSO through Google and Entra ID, enforced 2FA available.
Per-client OAuth
Each connector authorises against the client's own account and can be revoked by them.
Backups
Continuous, point-in-time recovery, tested restores — not an untested nightly dump.
Audit trail
Who changed a scope, who sent an invoice, who signed what and when.
Export, any time
Every client, contract, invoice, and dashboard, in full, with no exit fee and no retention hold.
Where we are honest
SOC 2 Type II is in progress, not certified.
We are in the audit window and will publish the report when it is signed, not before. If your procurement needs the certificate today, tell us on the demo — we would rather lose the deal than misstate it. Everything else on this page is live now, and we will walk your IT lead through the architecture on request.