Security and data handling
Two-factor for every user, draft-only billing access, no end-customer personal data, encrypted credentials, and deletion 30 days after the term ends.
On this page
Access
- Two-factor for everyone. Nobody reaches any data screen without two-factor sign-in.
- Workspace isolation. Every query is scoped to your workspace; roles separate who can model, approve and push, with an optional four-eyes rule.
- A full audit log of every change, approval, push and resolution, exportable as CSV.
Access to your billing and data systems
- Draft-only writes. TrueUpp drafts invoice items. It never finalizes, sends, charges or deletes.
- Least-privilege reads. Stripe access uses a restricted key with only the permissions listed in connecting Stripe. Usage arrives as files, through a token you can revoke, or from one read-only warehouse view.
- Encrypted credentials. Keys and secrets are encrypted at rest (AES-256-GCM) and never shown again after you save them.
No end-customer personal data
TrueUpp needs an opaque account id, metric names and numbers. Labels that look like an email or a person's name are flagged.
Retention and deletion
Usage, ledger and line data are deleted 30 days after the paid term ends, after you've had the chance to export everything from Settings › Data. Admins are emailed the deletion date when the subscription is cancelled, and again when the deletion is done. See plans and billing.
SOC 2
SOC 2 is on the roadmap. No report has been issued yet.
This website and free audits
This page covers the TrueUpp product. Our privacy policy covers this website, our forms and email, and how we handle audit files covers files you share for a free audit, which are deleted 30 days after we deliver the audit.
Questions
Questions or a security review questionnaire: hello@trueupp.com.