Trust and security

Defensible to finance and compliance.

FullBoat holds contract value, invoices, and cash. It is built to be trusted with them, and to prove that trust to the people who ask the hard questions.

How your data is protected
Workspace isolation

Sealed from every other tenant

Isolation is enforced on every database query, in code rather than by convention, and verified by an automated test suite that runs continuously. No workspace can see another workspace's data.

Encryption

Protected in transit and at rest

All traffic is encrypted in transit. All data is encrypted at rest. Your contract documents and financial records are protected on the wire and on disk by the managed cloud infrastructure FullBoat runs on.

Access control

Role based, enforced on the server

People see and change only what their role permits. Permissions are enforced on the server, not hidden in the interface, so a viewer cannot alter figures and no one can reach a workspace they do not belong to.

Audit log

Detailed and impossible to edit

Every financial and access event is recorded: who did what, to which record, and when. The log is filterable and exportable, and it cannot be changed after the fact. When finance or an auditor asks what happened, the answer already exists.

Your data

Yours, and portable

Your contracts and records belong to you. You can export them in full at any time and take them with you. FullBoat is a place your data lives, not a place it is trapped.

Availability

Managed, redundant, backed up

FullBoat runs on managed, redundant cloud infrastructure with regular backups, so a bad day for a server is not a bad day for your records.

How we think about it

Security is not a page. It is why the tool was believed.

FullBoat began as the system a company was run on through a diligence process and a sale, where every number had to survive outside scrutiny. That is the standard we hold the product to. The controls above exist because the tool was only ever useful if the people who audit, invest, and sign could trust what it said.

It has already survived the moments that matter most.

For your security review

Bring the hard questions.

If you run a vendor security review, a diligence questionnaire, or need a deeper conversation about architecture, data handling, and controls, we will meet it directly. Reach us and we will get you what you need.