Security & confidentiality
Discretion is engineered into every layer.
AlderMarc is built for discretion. No client name is published without consent. No deliverable is shared outside the engagement room. No advisor accesses a case without an explicit assignment.
Multi-factor access
MFA is required for every account; SSO-ready architecture for enterprise clients in a later phase.
Least-privilege roles
Eleven-role hierarchy; each user sees only the cases and records they are entitled to.
Tenant isolation
Row-level and file-level isolation between clients; no shared deliverable storage.
Encryption
Encryption at rest and in transit on every record, document and message.
Immutable audit trail
Every decision, approval and document version is preserved as an auditable record.
Human approval
Senior advisor sign-off required before any regulated deliverable leaves the platform.
Data Processing Agreements
DPA executed on every engagement; DPIA performed on regulated workstreams.
Confidential intake
Intake forms are encrypted; no third-party analytics on intake pages.
Enterprise SSO and SAML are on the platform roadmap for organisations requiring federated identity. Email-and-password access with MFA is available today.
Open a confidential case →