Security & trust

Your contracts are sensitive. We treat them that way.

StackTrackr holds some of the most sensitive documents a company has: its agreements and its costs. Our approach is simple: keep it encrypted, keep it scoped, keep it yours, and log everything we do on your behalf.

Principles

Six commitments we design around

Reasonable, honest guarantees, not security theatre.

Self-hostable

Run StackTrackr on your own infrastructure if you prefer. The same product, inside your network, under your control. No data ever leaves your environment.

Your data stays yours

Your register, contracts and cost data are yours to export at any time. We never sell it, never train on it, and never share it with third parties.

Role-based access

Grant the right people the right access. Owners manage their own tools; admins see the whole estate; viewers get read-only. Least privilege by default.

Encrypted document storage

Contracts, invoices and emails in the vault are encrypted at rest. Only authenticated members of your workspace can open them.

Audit log of every alert

Every reminder and digest is recorded: who it went to, for which tool, and when. If a deadline was missed, you can see exactly what was sent.

Secure authentication

Sign in is handled by a hardened auth layer with session management built in. Add your own identity provider when you self-host.

Data handling

How your data is handled, at a glance

Clear defaults you can reason about. When you self-host, all of this runs inside your own environment.

The alert audit log is append-only from your point of view: a durable record of every reminder StackTrackr sent on your behalf.
In transit
All traffic is served over HTTPS/TLS.
At rest
Documents in the vault are encrypted on disk.
Access
Scoped to your workspace, gated by role.
Retention
You control what you keep and export.
Deletion
Remove a tool and its documents go with it.
Portability
Export your register and spend data anytime.

We would rather be precise than impressive. If you have a specific compliance, residency or procurement requirement, tell us what you need and we will give you a straight answer about what we support today and what is on the roadmap.

Security you can explain to your board.

Self-host it, scope access by role, encrypt the vault, and keep a log of every alert. Start free and see for yourself.

No credit card required · Self-hostable · Cancel anytime