Security that passes a procurement review
Because the data we process is regulatory, financial and personally identifiable, our platform is designed around three principles: least privilege, defence in depth and full auditability — every change on the platform is logged, attributable and tamper-evident.
Controls that match how enterprise teams buy
- Encryption in transit
TLS 1.3 end-to-end with modern cipher suites. HSTS enforced on the public domain with a one-year max-age.
- Encryption at rest
AES-256 at the storage layer for databases, backups and uploaded workbooks. Upstream credentials isolated in a per-tenant secret vault.
- MFA + SSO
Mandatory MFA on every sign-in, with enterprise SSO (SAML / OIDC) available on Business and Enterprise plans.
- Role-based access
Partner, manager, preparer, reviewer, approver and read-only roles — each with precisely-scoped permissions you control.
- Immutable audit trail
Append-only log of every change — actor, timestamp, before/after state, justification — ready to export as a signed PDF.
- Hosted in Uganda
Primary infrastructure in-country. No cross-border transfer unless you opt in; data residency aligned to Uganda's data protection regime.
Our operational safeguards
Three practices we treat as non-negotiable.
- Least privilege
Every system account has the narrowest scope that lets it do its job. No standing admin access — privileged actions require fresh step-up MFA.
- Attributable actions
Shared accounts are prohibited. Every mutation is tied to a verified identity + session, so the audit answer is never "someone with admin."
- Audit-ready export
Produce a signed activity report for any period on demand — ready for URA assessment response, due diligence or internal audit.
Share the security story with your IT and audit teams
The full policy covers encryption, access controls, incident response, data retention and sub-processors — ready to attach to a vendor review.