🛡️ Security

How Stockivio keeps
your business data safe

What is in place today, in plain words, and what is not built yet.

🔐

Your data stays in your business

Every record is tagged with the business it belongs to, and Stockivio checks which business you are signed in to before it shows or changes a record. Tests that try to read another business's records are part of each release check.

  • ✓Records scoped to your business
  • ✓Checked on screens and API calls
  • ✓Cross-business tests before each release
👥

You decide who sees what

Give each person a role. Roles control which modules they can open and what they can do there. Field users only see their field screens.

  • ✓Role permissions per user
  • ✓Office and field users kept apart
  • ✓Field-level restrictions are not available yet
🔑

Safer sign-in

Switch on email one-time codes so a password alone is not enough to sign in. Keys you save for outside services, such as an AI key, are stored encrypted and shown only by their last four characters.

  • ✓Email one-time codes as a second step
  • ✓Encrypted provider keys
  • ✓Single sign-on (SSO) is not available yet
📋

A record of changes

The Audit Log records every important action with the date and time, the user, the module and the record (Enterprise plan). You can export your records as CSV or PDF at any time.

  • ✓Audit Log on the Enterprise plan
  • ✓CSV and PDF export
  • ✓Connection encrypted with HTTPS

Certifications

Stockivio does not hold ISO 27001, SOC 2 or similar certifications today, and we do not claim them. If your business needs a specific control, write to us and we will tell you honestly whether Stockivio has it.

🔐

Found a security problem?

Please write to [email protected] with enough detail for us to reproduce it. Do not test against other businesses' data. There is no paid bug-bounty programme.

Email [email protected] →
WhatsApp us
Englishहिन्दी