Data security
Your cost and customer data, kept apart and locked down.
Every client gets a dedicated ProfitKeel environment on Microsoft Azure, with its own application and its own database. We set it up and look after it; your data is never mixed with another organisation's.
Isolation
- A separate application and a separate database for each client. No shared tables, no cross-client queries.
- Data is loaded into staging tables and checked before anything reaches your model.
- Excel exports are built in the viewer's browser from what that person is allowed to see.
Access
- Sign-in with Microsoft Entra ID, with multi-factor authentication.
- Roles for administrators, analysts, approvers and report readers, plus a separate service identity for data feeds.
- Row-level security: each person sees only the results for their part of the hierarchy, in every report, dashboard and export.
Protection
- Encrypted in transit: HTTPS only, TLS 1.2 or later.
- Encrypted at rest in Azure SQL, with automatic backups and point-in-time restore.
- No stored database passwords: the application connects with a managed identity, and the database accepts Microsoft Entra sign-in only.
Accountability
- Every configuration change is recorded with who made it and when.
- Published results are read-only. Nobody edits a number by hand.
- During the close, configuration is locked; an emergency change needs an administrator and a written reason, which is logged.