Procurea is built with enterprise-grade security from the ground up. We protect your procurement data with industry-leading infrastructure, encryption, and access controls.
1Infrastructure
Procurea runs on Google Cloud Platform in the europe-west1 region (Belgium). The database is managed PostgreSQL hosted by Neon on AWS in the eu-central-1 region (Frankfurt, Germany), with automated backups. Frontend assets are served via Firebase Hosting with a global CDN for fast, reliable access worldwide.
2Encryption
All data is encrypted at rest using AES-256 encryption. Data in transit is protected with TLS 1.3. All database connections are encrypted end-to-end. Backups are stored encrypted in Google Cloud Storage.
3Authentication
Procurea uses OAuth 2.0 via Google and Microsoft for secure authentication. Session tokens are stored in httpOnly cookies, preventing XSS-based token theft. We do not store passwords: all authentication is delegated to trusted identity providers.
4Data Isolation
Each organization has fully isolated data within our PostgreSQL database. Application-level access controls ensure no cross-tenant data access is possible. API endpoints enforce organization-scoped queries at every layer.
5Compliance
Procurea is GDPR compliant. All customer data is stored exclusively within the EU: the application in Belgium and the database in Germany. We do not hold a SOC 2, ISO 27001 or equivalent third party certification, and we will say so plainly rather than describe one as in progress.
6Monitoring
We maintain 24/7 uptime monitoring with automated alerting for any anomalies. Application errors are tracked via Sentry with real-time notifications. Infrastructure metrics are monitored through Google Cloud Operations Suite.