Security
How access is controlled and what we can tell you today.
Draft. This page describes our intent in plain language. It has not yet been reviewed as a legal document and does not replace one. If you need reviewed terms for a procurement process, contact us.
Access control
Sarva Identity provides one account per person with role-based permissions applied at record, field and action level. The same rules are enforced in the interface, the API and reporting, so a permission cannot be bypassed by changing the route into the data.
Audit trail
Changes to records are attributed to a person and a time. Actions taken by automation or by an assistant are recorded the same way as manual ones.
Data in transit and at rest
Connections to SarvaSuite are encrypted in transit. Stored data is encrypted at rest.
What we are not claiming
We are an early company and we are not going to publish certifications we do not hold or uptime figures we have not measured over a meaningful period. If your procurement process needs specific assurances, ask us and we will tell you plainly what exists today.