Security and data

Built for clients who have to answer to regulators.

Keep each client's evidence and scores in its own workspace, sign in with your identity provider, and keep an audit log that nobody, including us, can edit.

Private by workspace
Evidence, personal data and scores are visible only to the people you invite, down to the sites each person may see.
Identity
Single sign-on, enforced two-factor authentication and device sessions you can revoke.
Accountability
Every change to a score, rule or permission is logged with who made it and why.

What is in it

  • A private workspace per client
  • SSO and enforced MFA
  • Role-based access by site
  • Immutable audit log
  • Retention policies by data type
  • Subject access and erasure handling
  • White-label workspaces
  • Uptime and support SLAs
Works with
Run your first wave this month.
Start from a template, pick your sites, and approve the auditors we propose.