Security
Purchase and payment data, handled with the care it needs.
Ipcosys holds vendor bank accounts, contract prices and payment decisions. It is built so the right people see them, the wrong people cannot change them, and every action leaves a record.
Segregation of duties
No one person can request, approve and pay.
Each step in the flow is tied to a role, and the rules stop the same person holding conflicting steps on the same purchase.
- Requesters cannot approve their own requests
- Buyers cannot approve payment runs
- Payers cannot edit vendor bank details
Protections
How your data is protected
Encryption in transit and at rest
All traffic uses TLS. Stored data, including uploaded invoices and vendor documents, is encrypted at rest.
Role-based access
Users see only the entities, departments and documents their role allows. Pricing and bank details are limited further.
Sign-in controls
Strong password rules, session timeouts and single sign-on on Enterprise plans.
Append-only audit trail
Approvals, overrides, rule changes and payment decisions are recorded with user and time. Records are added, never edited.
Sensitive field protection
Bank account changes need supporting documents and a second approver, and are logged separately.
Backups and export
Data is backed up daily. You can export your documents and records whenever you need to.
Questions
Security
Who at Ipcosys can see our data?
Is our data used to train AI models for other customers?
Can we get read-only access for auditors?
Have a security questionnaire for us?
Send it through and we will answer it for your review.