Security
Built so the security review takes one meeting.
Each business walled off in the database, credentials encrypted, everything hosted in Frankfurt, and your data never used to train AI. Whatever else your security team needs, we set up with you during onboarding.
01What’s in place
Eight things your security team will ask about.
- 01
Each business in its own tenant
Every table carries row-level security, so one company’s data is walled off from another’s in the database itself, not just in the app. - 02
Credentials encrypted at rest
ERP and integration secrets are encrypted with AES-256-GCM, using a dedicated key held outside the database. - 03
Hosted in the EU
The app and the database both run in Frankfurt. Backups are taken daily and kept in the EU. - 04
AI that doesn’t learn from you
Stokk uses Claude through Anthropic’s commercial API. Your data is never used to train models, each request carries only what that decision needs, and Anthropic deletes it within 30 days. - 05
Roles and module access
Give each role the modules it needs. Access is checked on the server, each role opens its own dashboard, and floor tools never receive cost or margin. - 06
Logged where it matters
Stokk AI actions and key settings changes are logged and visible to admins. - 07
GDPR paperwork, published
Our data processing agreement, subprocessor list and privacy notice are public, so your review can start before the call. - 08
A person approves
Nothing goes to a supplier or into your ERP from Stokk AI on its own. A person sends.
02Your requirements
Your security team sets the bar. We meet it.
Every review is different. Tell us what your policy asks for and we build it into your onboarding, so Stokk goes live to your standard, not ours.
Set up with you during onboarding
- Single sign-on with your identity provider
- Two-factor sign-in for every user
- A full audit trail of user actions, with export
- Your security questionnaire, filled in for procurement
- A security review with us before you go live
03The paperwork
Read it before the call.
Need a security questionnaire filled in or an architecture diagram? Email hello@stokkflow.com.
When you’re ready
Ready when your security team is.
Onboarding can include a security review meeting with us. Bring your questions and your questionnaire.