Security

How Efforvia protects your data

A short, honest account of what is implemented. If something is not on this page, we have not built it.

Companies cannot see each other

Every record is scoped to its organisation at the database layer, not by a filter someone remembered to add.

Role-based access with custom roles

Define your own role groups and assign permissions. A consultant sees their own work; a manager sees the team; finance sees the numbers.

Financial data is removed, not hidden

If you do not have permission, the amounts are not in the response at all. Hiding them in the interface would leave them in the API.

Audit history

Role changes, approvals, settings, expense decisions and plan changes are recorded with who, when and what changed.

Secure sessions

Token rotation, session revocation on password change, and rate-limited sign-in per account and per address.

Verified automated backups

Daily backups with an integrity check on every run. Encrypted connections end to end.

No certification claims

Efforvia does not hold SOC 2, ISO 27001 or a GDPR certification, and will not display badges suggesting otherwise. If a certification becomes relevant to your procurement, tell us and we will discuss it honestly.

Reporting a problem

Found something that looks wrong? Write to us and we will respond. info@efforvia.com