Security & Privacy

StandardArc Systems designs EarnedShield and VendorGate to handle commercially sensitive operational information with controlled access, tenant isolation, and careful production practices.

Access controls

Customer access uses secure authentication. StandardArc workspaces are separated by organization, and application permissions are enforced through role, membership, tenant, and entitlement controls so users are limited to the data and actions appropriate to their workspace.

Customer and vendor information

EarnedShield organizes customer financial-control and workflow data. VendorGate organizes vendor onboarding, compliance evidence, documents, expiration tracking, and readiness information. Customers remain responsible for ensuring they have the right to upload and process the information they provide.

Provisioning and paid access

Paid-product access is tied to the applicable StandardArc order and workspace. StandardArc uses automated provisioning, entitlement checks, and controlled access-state handling to reduce manual exposure and prevent one customer from being provisioned into another customer’s workspace.

Documents and storage

VendorGate document access is restricted by organization, membership, role, and paid-term state. When a VendorGate paid term expires, write access can be restricted while authorized read access remains available according to the applicable product terms.

Operational safeguards

StandardArc uses production logging and monitoring, controlled deployments, database access policies, and backup and recovery practices as part of its ongoing security program. Access is limited according to operational need, and production changes are reviewed and tested before launch.

No absolute-security claim

No internet-connected system can guarantee absolute security or uninterrupted availability. StandardArc Systems continues to improve its security, privacy, monitoring, recovery, and compliance practices as the products evolve.

Questions

For security, privacy, or access questions, contact support@standardarcsystems.com. Do not email passwords, authentication codes, payment-card details, or other sensitive credentials.