Security & privacy
Built so each company only ever sees its own data
A plain-language overview of how Assetrine protects your account and your financial records.
How your data is protected
Sign-in
Passwords are stored only as salted hashes. Sessions use random tokens, and repeated sign-in attempts are slowed down.
Company isolation
Every request is checked on the server against the company of the signed-in user — not just hidden in the screen.
Roles
Each role gets different permissions; nobody can approve their own request.
Secrets stay on the server
Database, AI and OCR credentials live on the server only and are never sent to your browser.
File uploads
Uploads are limited to supported types, checked by content, size-limited, and never publicly accessible.
Audit trail
Business actions are recorded in an activity log with who did what and when.
Good to know
No certifications claimed
Assetrine has not yet been independently audited or certified. We describe our safeguards here so you can judge them yourself.