SOLUTIONS
The questions procurement asks, answered.
Granular permissions, complete audit trails, data separation, encrypted secrets, GDPR export and erasure, and a retention policy enforced in code rather than promised in a document.
The situation
The build isn't the hard part. The hard part is the security questionnaire, the data-processing agreement, the auditor who wants to know who changed a price in March, and the legal requirement to keep financial records for a decade while also honouring an erasure request.
What you get
Each one links to the feature page that proves it.
Permissions with real granularity
Roles defined as data, with the exact capabilities this organisation needs. Permissions re-read from the database on every request and never stored in the token — so revocation is immediate, not eventual.
Identity & accessComplete audit trail
Every sensitive operation recorded with actor, timestamp, and precise detail. Field-level change history on records that need it. “Who changed the price in March” is a query, not an investigation.
Audit & historyData separation that isn't a convention
Organisations as a first-class concept, scoped at the authorisation layer. Cross-organisation leakage is an explicit, mandatory test case.
High-risk tools, constrained
Impersonation, bulk export, and bulk import each require a dedicated permission, are limited to the operator's existing data scope, are always audited, and can require fresh step-up authentication immediately before running.
GDPR handled properly
Full personal data export and erasure. And a clear, code-enforced line between what may be deleted and what must be retained — a financial document survives erasure with its personal fields anonymised and its legally required fields intact.
Encryption and key isolation
Secrets encrypted with AES-256 and never returned by any endpoint. Every installation generates its own keys, so a breach in one system cannot reach another.
Documentation that matches reality
OpenAPI generated from code, with a conformance sweep across the whole API surface. The security review reads the same system your team runs.
For the questionnaire
The three documents procurement asks for, in the order they usually ask for them.
DPA & sub-processors is not published yet. Ask us and we will send the current version.
Send us the questionnaire.
We answer them properly, and we'd rather do it now than at contract stage.
- We reply within one working day
- No sales sequence, no drip campaign
- NDA before the call if you'd prefer