What protects your formula data, in five minutes
A skimmable version of how ERRA handles your data. For legal-grade detail, limitations, and what we have not yet completed, see the full Security page.
Encryption
The application is designed to use TLS in transit and AWS-managed encryption at rest for the database and object storage; deployment-specific key configuration requires separate environment evidence. The repository configures application secrets through AWS Secrets Manager rather than embedding them in code.
Access control
Every action, viewing, editing, approving, exporting, is checked against the user's role. Approvals require a named human decision, recorded in the audit trail. TOTP authenticator-app MFA is available today. SSO and SCIM provisioning are not built yet.
Where data lives
Your organization's data sits on AWS infrastructure in the United States, isolated from every other tenant with PostgreSQL Row-Level Security enforced at the database level. Another organization's data is invisible by default.
What the audit trail guarantees
Every create, update, and delete on your domain data writes an append-only record: who, what, when, and the before-and-after state. The application's own database role cannot update or delete an audit row; the database refuses. An approved formula version is immutable, enforced by database triggers, not by a rule we ask the code to remember.
Subprocessor position
ERRA runs on AWS. The application is instrumented for error reporting through Sentry, carrying technical context, never your formula content; egress from the deployed environment is not yet enabled, so error reports do not currently leave it. We do not sell your data, and we do not share formula or ingredient data with other customers or third parties. We do not maintain a customer-ready subprocessor list today.
What we have not completed
No SOC 2 examination, no ISO 27001 registration, no independent penetration test. We haven't published a backup cadence, restore-time target, or incident-response SLA. The full list, along with the repository-backed controls above, is on the Security page. For what we currently report about uptime and incidents, see Status.
Questions before a review: email security@goerra.com.