Security
How Efforvia protects your data
A short, honest account of what is implemented. If something is not on this page, we have not built it.
Companies cannot see each other
Every record is scoped to its organisation at the database layer, not by a filter someone remembered to add.
Role-based access with custom roles
Define your own role groups and assign permissions. A consultant sees their own work; a manager sees the team; finance sees the numbers.
Financial data is removed, not hidden
If you do not have permission, the amounts are not in the response at all. Hiding them in the interface would leave them in the API.
Audit history
Role changes, approvals, settings, expense decisions and plan changes are recorded with who, when and what changed.
Secure sessions
Token rotation, session revocation on password change, and rate-limited sign-in per account and per address.
Verified automated backups
Daily backups with an integrity check on every run. Encrypted connections end to end.
No certification claims
Efforvia does not hold SOC 2, ISO 27001 or a GDPR certification, and will not display badges suggesting otherwise. If a certification becomes relevant to your procurement, tell us and we will discuss it honestly.
Reporting a problem
Found something that looks wrong? Write to us and we will respond. info@efforvia.com