Data encryption
Customer data is protected in transit with TLS and encrypted at rest by managed infrastructure services.
Security
Built for third-party risk programs that handle sensitive evidence.
Third Party Governance is designed around tenant-scoped access, controlled evidence workflows, and operational practices security teams expect from business software.
Security posture
Tenant-scoped access
Organization membership and role checks keep workspaces separated.
Evidence controls
Assessment files, reusable profiles, and review records are handled through controlled workflows.
Operational audit trail
Key actions are recorded for governance review, troubleshooting, and accountability.
Controls
Security controls for third-party risk management
Use this page as the starting point for procurement and security review conversations.
Authentication
Access is authenticated through Supabase-backed identity, tenant membership checks, and role-based authorization.
MFA
Multi-factor authentication is supported through the identity provider configuration used for each deployment.
Backups
Production deployments should use managed database backup policies and tested restore procedures.
Hosting
The platform is designed for managed cloud deployment with isolated application, database, storage, and email services.
Data residency
Data residency follows the region selected for the underlying database, object storage, and infrastructure providers.
Vulnerability management
Dependencies and application changes are reviewed through automated tests, security updates, and operational monitoring.
Need security details for procurement?
Share your review requirements and we will follow up with the right materials.