Security
Three checkson every request.
Who you are, what your role may do, and which company’s records — each checked in one place, on every request, and refused when it cannot be answered. Here is how your data is kept apart, where it lives, and what we do not claim.
- Who you areThe signed token, checked on every request
- What your role may doOne permission service decides
- Which company’s rowsThe database keeps each company apart
- A request that fails any check is refused — never let through.
Kept apart
Each check, in one place.
- 01
Who you are
Every signed-in request carries a signed token, and our API checks its signature on every path in — the web app, the phone apps and the API alike. A token that does not verify is refused.
- 02
What your role may do
One permission service decides what each role may see and do, everywhere in the product. If it cannot answer, the request is refused — never let through.
- 03
Which company’s records
The database itself keeps each company’s rows apart, so a request can only ever read its own company’s records. The company comes from your signed token, not from anything a browser can change.
Where and how
Where it lives, how it is kept.
Where your data lives
Our servers and storage volumes are all in Helsinki, Finland (checked 20 September 2026). Some services we use — the AI models and email delivery among them — process data in the United States; the privacy policy lists them.
Backups
Database backups are encrypted, and a scheduled job checks them.
In transit
Traffic to the product travels over TLS, with certificates issued and renewed automatically.
Our own admin tools
The tools our team uses to run the platform answer only from allow-listed addresses (checked 18 October 2026).
Signing in
The door, guarded.
Two-factor sign-in
Sign-in can ask for a one-time code from an authenticator app as well as the password.
Repeated wrong passwords
After repeated failed sign-ins the account is locked for a while, longer each time (checked 18 October 2026).
Your directory
If your company runs Okta or Microsoft Entra ID, people can be added and removed from it automatically (SCIM). Ask us to connect it.
Limits on requests
Requests are limited per company and per person, so one busy account cannot slow everyone else down.
The AI
Held tothe same rules.
- Nova, a service you add, works through the same permission checks as the person using her, and only sees what that person may see.
- Nova cannot approve a bill, send an invoice or a payment, approve a pay run or change anyone’s role.
- Vera, a service on Canadian numbers today, checks who is calling — a code word and a texted code — before she reads a caller’s own records.
- Every permission decision is logged.
Not claimed
What we do not say.
- As of October 2026 we do not hold a SOC 2 report, an ISO certificate or any other certification.
- We do not claim HIPAA compliance.
- Signing in with your own identity provider (single sign-on) is not offered as of October 2026.
- Traffic is encrypted in transit and backups at rest, but the product as a whole is not end-to-end encrypted.
Questions
Asked first.
Can another company ever see my data?
Not through the product. Your company is taken from your signed sign-in token, and the database itself keeps each company’s rows apart, so a request can only read its own company’s records.
Where is my data stored?
Our servers and storage are in Helsinki, Finland (checked 20 September 2026). Some services we use — the AI models and email delivery among them — process data in the United States; the privacy policy lists them.
Do you have SOC 2?
Not as of October 2026. We do not hold a SOC 2 report or any other certification, and we will say so here until we do.
Can the AI do things I am not allowed to?
No. Nova works through the same permission checks as you, and some actions are closed to her altogether: approving bills, sending invoices or payments, approving pay runs and changing roles.
Who do I ask about security?
Write to sales@operations-link.com or book a call, and we will answer your questions.
Get started
Run it allfrom one place.
Fifteen days free on the plan you pick, no credit card. Or book a call and we will set it up around how your company works.
Start free for 15 daysBook a 30-minute call
Free · times in EasternPick a day to see the open times.