Data security, backups and access control
Your books are the most sensitive thing your business owns. Here is what protects them, described specifically enough to be checked — and an honest note about what tBiz does not have.
- Workspace isolation
- Enforced in the database, not in the application
- Access control
- Per role and per module, with owner and admin tiers
- Audit trail
- Written by a database trigger, not by the screen
- Backups
- Nightly, retained, and restore-tested
- Formal certification
- None. tBiz holds no ISO or SOC certification.
How your data is protected
Isolation in the database
Every row carries the workspace it belongs to, and the rules that enforce that live in the database rather than in application code — so a bug in a screen cannot expose another workspace’s data.
Access control per role
Roles carry permissions per module and per action, so a storekeeper can receive goods without seeing the profit and loss and a CA can read the books without changing them.
An audit trail you did not write
Changes are recorded by a database trigger with the values before and after, the actor and the time — which means it captures changes made by any path, not just by the screen that remembered to log.
Backups that are restored
Taken nightly and retained, and — the part that matters — actually restore-tested, because an untested backup is a hope rather than a protection.
Sessions and sign-in
Email verification on signup, password reset, and a single active session per account so a forgotten login on a shared machine does not stay open indefinitely.
No third-party trackers on public pages
The marketing site, the signup form and the quote form load no third-party analytics or tracking script. The human check is first-party.
What tBiz does not claim
- No formal certification. tBiz holds no ISO 27001, SOC 2 or equivalent certification. If your procurement process requires one, that is a genuine blocker and we would rather you knew now.
- No independent penetration test to publish. We will not imply an audit that has not happened.
- Not a compliance product. Security controls protect your data; they do not make your books compliant. That is what the readiness checks are for, and they are a different thing.
- Ask us anything specific. A security questionnaire gets a direct answer, including where the answer is no.
Security questions
Can another business see my data?
No. Every row is scoped to its workspace and the enforcement is in the database rather than in application code, so it does not depend on a screen remembering to filter. The isolation has been audited internally and no cross-workspace access was found.
Is tBiz ISO 27001 or SOC 2 certified?
No. tBiz holds no formal security certification, and we will not imply otherwise. If your procurement requires one, that is a real blocker today.
How often are backups taken?
Nightly, with retention, and they are restore-tested rather than merely taken — an untested backup is not a backup.
Can I restrict what my staff can see?
Yes, per role and per module. A branch manager can be limited to their branch, a storekeeper to stock, and your CA given read-only access to the books — and users are unlimited, so nobody needs to share a login.
Related
Ask us the awkward questions
Send your security questionnaire with a quote request and you will get a direct answer to each item.