SpectroNova Express
Security & data

Your books, your data, your way out

You are handing a young company your financial records. Here is what is assured about them, who attests to it, and how you leave with them. Everything on this page is meant to be checked, not taken on faith.

Attestationscurrent
SOC 1Controls over financial reporting
SOC 2Security, availability, confidentiality
Attested

Examined by others, not just promised by us

What is held and what it covers.

SOC 1Controls over financial reporting

Independently examined controls relevant to our customers' financial reporting.

SOC 2Security, availability, confidentiality

Independently examined controls against the Trust Services Criteria.

UAE PDPLPersonal data

Personal data is processed under the UAE Personal Data Protection Law, as set out in our Privacy Policy.

Read the policy
UAE VATTax records

VAT is computed on every line, invoices are numbered sequentially and, once issued, are never altered.

Assurance register

Ten things that are always true

Each line is a commitment your reviewers can test.

RefControl
  • A-01Data isolation

    Each customer's data is segregated and inaccessible to any other customer.

  • A-02Encryption

    Data is encrypted in transit and at rest.

  • A-03Backup and recovery

    Daily automated backups with point-in-time recovery.

  • A-04Access control

    Role-based access, enforced on the server, administered by you. You decide who sees money.

  • A-05Authentication

    Individual accounts, sessions that expire, no shared logins.

  • A-06Audit logging

    Every change to a business record is logged with who made it and when. The log cannot be edited or deleted.

  • A-07Data ownership

    You retain all rights to your data. Terms of Service §7.1.

  • A-08Portability

    Export at any time, in open formats, from inside the product. Terms of Service §7.3.

  • A-09Retention and deletion

    Thirty days of full access after cancellation, then permanent deletion. Cancellation Policy.

  • A-10Financial integrity

    Sequential invoice numbers, never reused. Issued invoices are corrected only by credit note or void, and both stay on the books.

Questions from your IT or legal team

Send them this page, and the policies behind it.