01/Security

Security

Role-gated pricing

Crew chief accounts cannot retrieve rates, costs, or totals through the UI or the API. Enforced at the data layer, not hidden in the interface.

Client approval links

Single-use, time-limited tokens scoped to one ticket and one action, revocable and superseded on reissue. Approve and reject actions are logged with actor and timestamp.

Private instance

A Waltasoft-managed private instance with dedicated Azure resources per customer engagement.

Encryption and region

TLS in transit. US Central Azure hosting. Encryption at rest via Azure platform defaults.

Audit trail

Ticket status changes for approve, reject, and resubmit carry actor and timestamp.

Data export

Ticket PDFs, billing CSV, and rate-sheet access for entitled roles. Full data export available on request at any time.