Isolated by design
Procurement data is commercially sensitive. Avtaly treats it that way from the first upload — isolation and access control are built into the foundation, not bolted on.
The isolation model
- Workspace isolation
- Your data lives in its own workspace, isolated at the database layer — not by an application checkbox.
- Server-enforced permissions
- Roles and access rules are enforced on the server, on every request. Nothing sensitive is left to the browser.
- Encrypted in transit
- All traffic between you and Avtaly is encrypted in transit with TLS.
- Your data stays yours
- Your quotes, your rates, your history. Benchmarks are computed from your own workspace’s data — we don’t pool your prices with other customers.
The commitments
The isolation model, reduced to statements your review can hold us to.
- Isolation enforced at
- the database layer
- Permissions enforced on
- the server, every request
- Left to the browser
- nothing sensitive
- Traffic in transit
- encrypted with TLS
- Benchmarks computed from
- your workspace only
- Prices pooled with other customers
- never
Security questionnaires and due-diligence requests answered with specifics. Architecture, isolation model, access control — in writing, for your review process.
support@avtaly.com