Security and governance you can hand to procurement.
Enterprise controls, documented data provenance and a support team that answers in hours, not weeks.
What protects your workspace
Encryption everywhere
TLS 1.2+ in transit and AES-256 at rest across every database and backup.
Row-level access control
Every record is scoped to your organisation; access is denied by default.
Full audit logging
Sign-ins, exports, admin changes and API calls are logged and retained.
SSO and role-based access
SAML SSO, granular roles and instant de-provisioning on enterprise plans.
Resilient infrastructure
Managed, multi-zone hosting with automated backups and point-in-time recovery.
Documented provenance
Every dataset carries its source, collection date and processing history.
Questions, answered.
Where is customer data stored?
Application and customer data is stored in managed, encrypted databases with automated daily backups and point-in-time recovery.
Can we sign a DPA?
Yes. A data processing agreement is available for all paid plans and is signed as part of enterprise onboarding.
How do you handle data subject requests?
Requests are handled by our privacy team within 30 days; account owners can also export or delete workspace data directly.
Do you support SSO?
SAML SSO and SCIM de-provisioning are available on the Enterprise plan.
Need our security pack?
We will send the full documentation set, including sub-processors and retention schedules.