Security & trust
How your savings data is protected
Last updated:
Savings tracking is a finance-grade system of record. It is built to withstand scrutiny from a finance team or a buyer running due diligence. Here is exactly how.
Per-organization isolation
Every organization is strictly partitioned from every other. Isolation is not just handled in the UI: it is enforced in the database through Row-Level Security policies. By construction, a query can only ever return data belonging to the signed-in user's organization.
Append-only audit log
Key financial events — stage changes, baselines, savings lines and finance decisions — are recorded in an append-only log. Authenticated users have no privilege to modify or delete that log.
Finance-controlled validation
Savings stay “claimed” until a finance validator validates them. Only that role can write a validation — enforced in the database, not just on screen. The reference figure is always the validated total.
Authentication and access control
Access is based on four roles (buyer, team lead, finance validator, administrator) enforced in the database. Passwords are at least 10 characters long and never stored in clear text; sign-in, invitation and reset links are single-use. Nobody joins an organization except at its administrator's invitation. Deactivating a member immediately cuts their access to the data and revokes their sessions.
Hosting and transfers
The database, authentication and file storage are hosted in the European Union (Paris, France (EU — eu-west-3)) by Supabase. The application's server code runs on Vercel in the Paris region (cdg1). Vercel is a US company and its delivery network routes requests and serves static content from the point of presence closest to the visitor, so technical data (IP address, access logs) may be processed outside the EU. Those transfers are covered by the applicable data processing agreements and Standard Contractual Clauses (SCCs).
Encryption
Data is encrypted in transit (TLS) and at rest. Passwords are never stored in clear text: only a hash is kept.
Backups
Backup availability and retention depend on the subscribed Supabase plan. Recovery objectives and the restore procedure are being formalised during private beta.
Your data stays yours
Every user can export their personal data. An administrator can export all of the organization's data (Excel, PDF, JSON) and delete it permanently from the Account page: its data, its attachments and its members' accounts are then erased. Attachments are downloaded one by one; the export does not bundle them into an archive yet.
Report a problem
Found a vulnerability or security concern? Write to us at privacy@theprocurementor.com (see also /.well-known/security.txt). We take such reports seriously and will get back to you promptly.