Our security approach

This describes how the product is designed. Tandivio does not currently hold third-party security certifications.

Tenant isolation

Every business record carries its organization, and database rules plus tenant-aware links stop records from referencing another organization's data.

Server-enforced roles

Owner, sales, project lead, team member, HR, accounts and support capabilities are checked in the database on every read and write.

Client portal boundaries

Clients see only explicitly granted projects, published updates and — with finance permission — issued invoices. Internal notes, tasks and estimates stay internal.

Audited changes

Role changes, onboarding activation, invoice issue, voids and payments write audit events that ordinary users cannot edit.

Safe money handling

Amounts are stored as integer minor units; issued invoices keep a client snapshot and unique, concurrency-safe numbers.

Honest integrations

We never show an email as delivered or a payment as successful without provider evidence. Online payments and email delivery require explicit configuration.