Security & compliance

Security you can build on.

Multi-tenant isolation, encryption everywhere, revocable access and signed device events — from day one. Here’s how Asetavo keeps your asset data secure and compliant.

Isolated databasesRole-based accessTLS everywhere

For procurement, IT and security teams: visit the Trust Center for full details.

Tenant isolation

Every workspace is isolated so one tenant can never reach another’s data.

Encryption in transit

TLS on every connection. Reader signing secrets are encrypted with AES-256-GCM using a key kept outside customer databases.

Revocable tokens

API and device tokens are scoped and can be rotated or revoked at any time.

Signed device events

Reader events are HMAC-signed so ingested data is authentic and tamper-evident.

How tenant isolation works

Tenant A
Isolated tenant DB
Key store (outside tenant DB)
Reader event (signed)

Access control / RBAC

Fine-grained roles across capabilities, deny-by-default, with finance fields protected separately.

Data ownership, export & deletion

Your data is yours — export anytime, and it is deleted on a defined schedule after termination.

Availability

Current service status is published on the System Status page. Ask us about backup and recovery arrangements for your plan.

Hosting & data residency

Currently hosted in shared regions; dedicated data-residency options are on the roadmap.

Compliance status & roadmap

GDPR & CCPA rights honoured
SOC 2 — not certified
Responsible disclosure
Found a vulnerability? Report it to security@asetavo.com
FAQ

Security questions, answered

All traffic is encrypted in transit with TLS. Each company’s data lives in its own isolated database, and sensitive secrets such as reader signing keys are encrypted with AES-256-GCM using a key kept outside customer databases.

Ready to account for every asset?

Tag, track and audit everything you own — from a handheld scanner to a boardroom report.

No card required · Workspace ready in minutes · Simple USD pricing