Where your data lives, and who can reach it.
What is stored, who can see it, and what we do not have yet.
Isolation
Every record belongs to one company, and every read and write checks it. Tests with two companies prove one can't see the other's data.
Access inside a company is set per role, and can be adjusted per person.
What is recorded
Every action an assistant takes is logged before it runs, with the company, the user, the result and how long it took. Proposals, invoices and cost changes carry their own history.
That record exists because changes are staged for approval, so something has to hold what was proposed and who approved it. It doubles as the audit trail.
Backups
The database is backed up off site every day, encrypted. Customer files are copied off site every day.
What we don't have yet
Ergivo is one developer and no outside investors. There is no SOC 2 report and no penetration test. Multi factor authentication on the dashboard is not shipped yet.
Month to month with no annual contract, full data export on demand, and a founder you talk to directly. If your procurement requires a SOC 2 report today, we do not have one.
Every customer gets an export guarantee in writing before they sign.
On AI and your data: the assistant runs under your own Claude or ChatGPT account and reads only what your login is scoped to, under the same login and permissions as the dashboard. Ergivo never sells your data and never uses it to train models. The conversation itself sits under your AI plan's terms, and we will walk through exactly what that means on the call.
If there is a question this page doesn't answer, ask it on the call and you will get a straight answer or a date.