Security
Your project record, protected.
Traklio holds the evidence your projects depend on. Here is how we protect it, described as it's built today.
Access only to what your role allows
- Every request is checked against the person's role in that company, workspace and project. Anything without an explicit rule is refused.
- Clients, consultants, subcontractors and suppliers see only what's shared with their side of the project.
- Search and the Assistant re-check every result against the person asking, so neither can reveal something their role can't open.
Strong sign-in
- Passwords are stored only as salted bcrypt hashes.
- Two-factor authentication for every account; company administrators can make it compulsory.
- See every active session and sign out of any of them.
- Single sign-on through your identity provider (OpenID Connect), for domains you've proved you own, on plans that include it.
A record nobody can quietly change
- Who did what and when is logged across workspaces and projects, and administrators can export it on plans that include it.
- The document audit trail is append-only: the database itself refuses edits and deletions.
- Approved and issued documents are never overwritten. A change is a new revision, and the old one stays on file.
Files
- Files are stored in Cloudflare R2, which encrypts them at rest.
- Downloads use signed links that expire after five minutes, and every download of a controlled document is logged.
- Superseded and void documents warn before they open.
In transit
- Every connection to Traklio is encrypted with HTTPS.
- The database, cache and search run on a private network that isn't reachable from the internet.
Payments
- Payments are taken on Stripe's own checkout. Card details never reach Traklio's servers.
The Assistant
- It reads only what the person asking can see, and it can't approve, sign or close anything.
- We don't use your data to train AI models.
Responsible disclosure
Found a vulnerability?
Email admin@traklio.iowith the details. Give us reasonable time to fix it before telling anyone else, and don't access or change other people's data. We won't act against good-faith research that follows these rules.
More detail
Security questionnaires for your procurement team: email admin@traklio.io. Traklio is a product of Daxion Technologies Pvt Ltd.
See Traklio on one of your projects.
Book a 30-minute walkthrough with your own ITPs and inspection forms, or start a free workspace and try it yourself.