Trust & Security

Security you can explain to your accountant.

This page is maintained by Barkhill Corporation SRL to answer common security and privacy questions about Cenatrix. It describes controls that are enabled in the product today. It is not a certification and does not replace your own risk assessment.

Encryption in transit and at rest

All traffic to Cenatrix runs over TLS 1.2+. Data at rest is encrypted on our cloud infrastructure.

Authentication

Email + password with strong hashing, Google sign-in, and email verification for the Customer Procurement Portal.

Role-based access control

Roles and permissions are stored server-side. The platform enforces least-privilege for every module and workspace.

Row-level data isolation

Every tenant's data is isolated by row-level security policies. A customer cannot see another customer's rows — by design.

Managed cloud hosting

Cenatrix runs on managed cloud infrastructure with automated backups, monitoring and DDoS protection.

Audit log

Sensitive admin actions (user changes, permission changes, exports) are recorded in an audit log available to workspace admins.

Data handling

You own the data you put into Cenatrix. We process it only to provide the service, and never use customer data to train third-party AI models. AI features run against your workspace scope only. You can export your data at any time.

Shared responsibility

Cenatrix secures the platform: infrastructure, application code, authentication, encryption and backups. You secure your account: strong passwords, timely off-boarding of users, and choosing the right roles for the right people.

GDPR

Barkhill Corporation SRL operates from the European Union and processes personal data in line with the GDPR. For a signed Data Processing Agreement covering your workspace, please contact us.

Report a vulnerability

Found something concerning? Please write to security@cenatrix.com. We appreciate coordinated disclosure and will respond as quickly as we can.

Need more detail for your procurement team?

We're happy to answer questionnaires and share our sub-processor list on request.