Trust
Security you can inspect.
This page lists only controls that exist today. We never imply a certification we do not hold.
What is running
- Each company's data is kept separate by database row-level security rules, which we check with automated tests. We are completing a further review before onboarding additional companies.
- Access is role-based: what a person can see and do is decided by their assigned role.
- Traffic to the platform is encrypted in transit over HTTPS.
Items on this list are reviewed against the product before each site change. See the standards table below for certification status.
Standards
| Standard | Status |
|---|---|
| SOC 2 | Not certified |
| ISO 27001 | Not certified |
Status. We have not completed an audit for either standard and hold no certificate or report for them. We will update this page only when that changes.
Questions about security? Talk to us.