Security

Confidential cost data, handled properly

Tender prices and supplier rates are among the most sensitive data a contractor holds. We treat them that way.

Encryption

All data is encrypted in transit with TLS 1.3 and at rest with AES-256 managed keys.

Row-level security

Every record is scoped to an organization. Project members only see the projects they are assigned to.

Role-based access

Eight roles from Organization Owner to Viewer, with project-level permission overrides.

Audit trails

Every approval, rate change, award and document action is recorded with user, timestamp and comment.

Authentication

Email and password, two-factor authentication and enterprise SSO via SAML or OIDC.

Storage isolation

Separate buckets for project documents, supplier documents, invoices, reports and organization logos.

Responsible AI handling

AI features never overwrite approved commercial data. Extracted values enter a review queue where an authorised user accepts or rejects each suggestion, and every suggestion carries a confidence score and source reference.