Back to Platform
SECURITY

Sleep well. Your data is where it belongs.

Single sign-on via Google and Microsoft, role-based access, full audit log and encryption at rest and in transit. No security checkbox left undone.

Security·SSO + audit log
Healthy
Roles
Leadership
4 people
All boards, all sources
Finance
3 people
Revenue, cash, payables
Sales
11 people
Own pipeline, team roll-up
Read-only viewer
6 people
Selected dashboards
Audit log
Sander
2 min ago
Exported revenue board (PDF)
Eva
11 min ago
Signed in via Google SSO
Marc
1h ago
Role changed: Sales → Leadership
System
yesterday
Key rotation succeeded
Encryption
AES-256
Transport
TLS 1.3
SSO
Google, Microsoft
What it does

What it does The grown-up controls, on by default.

01
SSO that just works

Google Workspace and Microsoft Entra. Click 'sign in with', you're in. We respect your identity provider's MFA and conditional access policies.

02
Role-based access

Three roles out of the box, custom roles on top. Restrict by dashboard, by data source, by team. People see what they should, no more.

03
Full audit log

Every sign-in, every export, every permission change. Searchable, exportable, retained for as long as your policy says.

04
Encryption everywhere

TLS 1.3 in transit. AES-256 at rest, in the database and in backups. Keys managed by our provider's KMS with documented rotation.

Who it's for

Who it's for

People who get the security questionnaire.

IT and security leads

SSO, audit log and clear sub-processor list. The vendor review goes fast.

Teams with sensitive data

Revenue, customer details, employee numbers. Role-based access keeps them visible only to who should see them.

Boards and auditors

Auditable trail of who saw what and when. Useful for the annual review, painful to fake.

Example workflows

Example controls

Three controls that come up most.

01
Contractor offboarding

Disable in Google Workspace, lose access to the dashboard the same second. Audit log records it.

02
Manager-only revenue

Revenue dashboards visible to leadership and finance, hidden from everyone else by role.

03
Board-only forecast

Sensitive forward-looking numbers locked behind a separate role and an extra confirmation step.

FAQ

FAQ

Lock it down, without locking out the team.

We'll walk through SSO, roles and the audit log with your security lead in 30 minutes.