Security
Built for figures that get audited.
This page lists what is implemented. No seal we do not hold.
Access
Who may see what is decided by the database, not by a login screen.
- Tenant separation
- Row-level security on every tenant table, enforced in the database. The application has no rights to bypass it. An automated test checks the separation on every code change.
- Access
- Invite-only, no self-registration. Invitations work once and expire.
- Sign-in
- Password with a second factor, Microsoft Entra ID or Google. Mandatory two-factor and single-sign-on-only can be switched on per tenant.
- Roles
- Viewer, editor and admin per tenant. Every page and every write action checks the role.
Traceability and operations
What happened can be shown. What is stored can be handed over and deleted.
- Change log
- Every write action with person and time, administrative actions included. Every import stays traceable as a run and can be rolled back.
- Access by us
- If Rehlytics has to enter a tenant to help, that is permanently visible there as a notice and it is logged.
- Hardening
- Content Security Policy, local fonts without external requests, rate limits on sensitive paths, type and size checks on every upload.
- Operations
- Hosted in Germany, at netcup in Nuremberg. Development and production run separately.
- Data protection
- Data export and complete deletion of a tenant are implemented as features, not as process promises. From receivables and payables the import reads only account number and type. Data processing agreement under Art. 28 GDPR.
- planist assist
- AI answers are labelled as such. An AI value stays a suggestion and appears as a finding until a person confirms it.
Three roles, one ranking.
One single place in the code defines the ranking, and every page and every write action checks against it.
| May | Viewer | Editor | Admin |
|---|---|---|---|
| Read figures, reports and dashboards, comment | allowed | allowed | allowed |
| Import, plan, steer the forecast | not allowed | allowed | allowed |
| Maintain dimensions and calculated rows, acknowledge findings | not allowed | allowed | allowed |
| Chart of accounts, opening balances, key figures | not allowed | not allowed | allowed |
| Users, sign-in methods, PDF templates | not allowed | not allowed | allowed |
See your own figures in planist.
25 minutes on video. We show the reconciliation on sample data or on an export from your bookkeeping.