Organization isolation
Each organization is a tenant. PostgreSQL row-level security and permission checks apply to application data access.
Security
AuditExport handles business spreadsheets. The security model is tenant isolation, least privilege, and private storage — not a compliance badge page.
Each organization is a tenant. PostgreSQL row-level security and permission checks apply to application data access.
Owners, admins, managers, analysts, reviewers, and viewers get different permissions. The server re-checks every action.
Source files, derived datasets, and reports sit in private buckets. Downloads use short-lived signed URLs after authorization.
Production architecture is designed so authenticated files are hashed, inspected, and scanned before they become ready. When scanning is required, a scanner failure is treated as not clean (fail closed). We do not claim that a live malware daemon is proven running in every production environment.
The uploaded workbook is not rewritten. Workbook audit never executes formulas or macros.
Sensitive actions write append-only events with IDs and statuses — not payroll amounts or spreadsheet formulas.
Retention policies are explicit. Organization deletion is delayed and cancelable. Actively referenced certified data is not silently purged. We do not claim that point-in-time recovery or a specific backup schedule is enabled until that is confirmed in the hosted database dashboard.
Production refuses fake billing, email, and AI providers. Preview and CI use test or fake integrations.
Logs, Sentry, and PostHog are not allowed to receive bank accounts, payroll values, formulas, AI prompts, or signed URLs.
Optional AI may explain. It cannot calculate, approve, or write authoritative financial results.
Transport encryption and storage encryption are provided by the hosting and database vendors we use (Vercel, Supabase, Cloud Run). We do not claim SOC 2, ISO 27001, HIPAA, PCI, or “bank-grade” certification. We do not claim GDPR or CCPA certification on this page.
Questions about security? Contact us.
Start free. Sensitive files stay in the authenticated application.