Loading content
Security
The controls the platform is built around. This is the design, not a certification. Anything still being released is marked.
Each table is protected by row-level security keyed to your organisation. Automated tests check that one client cannot read another's data.
Role-based access for owners, admins, preparers, reviewers and read-only auditors. Multi-factor authentication is planned for every user and will be recommended for admins.
Data is encrypted in transit with TLS and at rest by our hosting provider. Files are kept in private storage and shared only through short-lived signed links.
Standard: client data is hosted in the European Union (Frankfurt, Germany). UAE data residency: quoted on request, in a dedicated environment hosted in the UAE and kept separate from the standard environment. Enquiries submitted through this website are stored in the EU.
Imports, assumption changes, runs, approvals, exports and administrative actions are written to an append-only log that cannot be edited or deleted.
You can request an export of your data or its deletion at any time.
The planned assistant will read the calculated results in order to explain them. It will not be able to calculate, change or approve provision figures, and the contents of uploaded files will be treated as data rather than as instructions to the assistant.
To report a suspected vulnerability, email ah@eclprosolutions.com with the subject line "Security report". Please include a description of the issue, the steps to reproduce it and any relevant screenshots. We acknowledge reports within two business days and ask that you give us reasonable time to investigate and fix the issue before any public disclosure.