What protects your formula data, in five minutes
A skimmable version of how ERRA handles your data. For application controls and the assurance roadmap, see the full Security page.
Encryption
Data is encrypted at rest with Aurora storage encryption and S3 default encryption in AWS us-west-2. HTTPS with HSTS protects web traffic in transit. Application secrets are managed as encrypted SST secrets and supplied to the application at runtime, rather than embedded in code.
Access control
Every action, viewing, editing, approving, exporting, is checked against the user's role. Approvals require a named human decision, recorded in the audit trail. TOTP authenticator-app MFA is available today. SSO and SCIM provisioning are on the roadmap.
Where data lives
Your organization's data sits on AWS infrastructure in the United States, isolated from every other tenant with PostgreSQL Row-Level Security enforced at the database level. Another organization's data is invisible by default.
What the audit trail records
Every create, update, and delete on your domain data writes an append-only record: who, what, when, and the before-and-after state. The application's own database role cannot update or delete an audit row; the database refuses. An approved formula version is immutable, enforced by database triggers, not by a rule we ask the code to remember.
Infrastructure and error reporting
ERRA runs on AWS in us-west-2. NAT egress is deployed. Error reporting is configured for Sentry with request bodies, headers, cookies and user fields stripped before sending. Customer-directed sharing is limited to the partners the customer invites, and benchmarks are opt-in aggregates across five or more organizations. We do not sell customer data.
Assurance roadmap
Available now: Aurora point-in-time recovery with a 14-day window, a rehearsed restore, document versioning and a documented incident-response plan. Planned: a SOC 2 evidence period and an independent penetration test. ERRA has not completed a SOC 2 examination or an independent penetration test and does not hold ISO 27001 registration. Recovery targets are not contractual commitments. Confirmed-breach customer notices follow the Platform Terms. More detail is on the Security page. For what we currently report about uptime and incidents, see Status.
Questions before a review: email security@goerra.com.