Where your data lives, and who can reach it.
Written before anyone asked, because the honest version is short and the alternative is you finding out later.
Isolation
Every table carries a company and every query is scoped to it. One company's staff cannot see another company's customers, crews, prices or photos, and that is enforced in the data layer rather than in the interface.
Access inside a company is set per role, and can be adjusted per person.
What is recorded
Every action an assistant takes is logged before it runs, with the company, the user, the result and how long it took. Proposals, invoices and cost changes carry their own history.
That record exists because changes are staged for approval, so something has to hold what was proposed and who approved it. It doubles as the audit trail.
Backups
The production database and every customer file are backed up off site daily, encrypted. The sync is incremental and it is verified.
What we don't have yet
Ergivo is one developer and no outside investors. There is no SOC 2 report and no penetration test. Multi factor authentication on the dashboard is being built and is not shipped.
What that buys you: month to month with no annual contract, full data export on demand, and a founder who answers the phone. What it costs you: we are newer than the incumbents, and if your procurement requires a SOC 2 report today, we do not have one.
Every customer gets an export guarantee in writing before they sign.
A security page that lists only strengths is a security page that is hiding something. If there is a question this page doesn't answer, ask it on the call and you will get a straight answer or a date.