Your ledger is the most sensitive system you run.
Profit Vitals holds guest revenue, supplier payments, bank positions and payroll for entire portfolios. The controls below are the baseline, not the premium tier.
Data protection
Encrypted in transit and at rest, with tenant isolation enforced at the data layer rather than in application code.
- TLS 1.2+ in transit
- Encryption at rest
- Row-level tenant isolation
Access control
Role-based permissions mapped to finance duties, with multi-factor authentication required for every user.
- Mandatory multi-factor authentication
- Role-based permissions by department
- Segregation-of-duties matrix
Auditability
Every posting, approval and configuration change is recorded immutably and exportable as an audit-evidence pack.
- Immutable audit log
- Approval trail on every payable
- On-demand evidence export
Residency & privacy
Choose the region your data lives in, with GDPR-ready data subject handling and documented sub-processors.
- Regional data residency
- GDPR-ready DSAR handling
- Published sub-processor list
Availability
A 99.9% uptime target with transparent status reporting, tested backups and documented recovery objectives.
- 99.9% uptime target
- Point-in-time recovery
- Tested restore procedures
Assurance
SOC 2-aligned controls, PCI-aware handling of payment data, and independent penetration testing.
- SOC 2-aligned control set
- PCI-aware card data handling
- Independent penetration testing
Bring your security questionnaire.
We answer vendor security assessments directly, share our control documentation under NDA, and will walk your IT team through architecture, residency and recovery on a technical call.
Talk to us about controls, not just features.
Book a technical session with our platform team alongside the product demo.