CHECKCONTROL TRUST CENTRE

Operational confidence starts with responsible access.

CheckControl is designed to keep operational information focused on the people who need it. Here is how we approach access, accountability and ongoing assurance.
Clear data responsibilitiesLeast-privilege accessClear retention controls

CONTROL FRAMEWORK

Security designed into the account model.

01

Identity & sessions

Individual accounts, time-limited invitations and revocable sessions help keep access personal and accountable.

02

Organisation isolation

Customer records are scoped to the right organisation and resolved through server-side membership checks.

03

Role permissions

Administrative actions are limited to active members with the right role—rather than shared manager access.

04

Evidence protection

Operational evidence is available only to authorised people and follows the organisation’s retention controls.

05

Audit history

Sensitive account and operational changes are recorded so managers can understand what happened and when.

06

Data lifecycle

Organisations can manage retention, export their records and request deletion through a verified process.

OUR APPROACH TO ASSURANCE

What protects your workspace today—and how we stay accountable.

Current safeguards
  • Individual account access
  • Organisation-scoped records
  • Role-based controls
  • Evidence retention settings
  • Audit history
  • Security response headers
Assurance roadmap
  • Regular access-control reviews
  • Backup coverage and restoration validation
  • Independent security review as the product scales
  • Clear privacy documentation
  • Supplier and subprocessor review
  • A clear route for reporting security concerns

RESPONSIBLE DISCLOSURE

Found a security concern?

Do not include passwords, access keys, personal information or customer records in an initial report.
Review privacy commitments →
? Help & Support