Workspace isolation
Every business record is scoped to a Workspace. API and background-task access must validate that boundary.
Security
Financial controls should stay explainable.
Traqvera Reconcile is being designed around data isolation, least privilege, deterministic financial logic, evidence-backed AI, and an attributable close.
CURRENT STATUS
Pilot implementation baseline
Traqvera Reconcile is in development. The items below describe approved architectural requirements and Pilot operating boundaries—not an independent certification or a claim that every production control has already been deployed.
Core controls
Least privilege
Role-based permissions separate viewing, investigation, resolution, override, source management, and sign-off.
Protected files
Customer files are intended for private object storage with short-lived, operation-specific upload and download access.
Encryption
The production design requires TLS in transit and encryption at rest for database and object-storage data.
Audit trail
Uploads, rule versions, overrides, AI recommendations, approvals, risk acceptance, and sign-off are attributable events.
Recoverable processing
Imports and reconciliation tasks are designed to be idempotent, retryable, and protected from duplicate business effects.
AI boundary
AI investigates.
It does not own the money.
Deterministic engineOwns amount parsing, matching rules, expected settlement windows, delay and exposure calculations, state transitions, and close conditions.
AI investigatorOrganizes approved evidence, explains likely causes, and recommends a structured resolution.
Authorized humanApproves, rejects, corrects, escalates, accepts risk, and signs off the reconciliation.
Pilot data
Agree the boundary before transferring data.
Before Traqvera receives production-like customer data, the Pilot parties must document the permitted fields, secure transfer method, access, processing location, retention, deletion, subprocessors, incident contact, and exit procedure.
Do not send transaction files, bank statements, access credentials, tokens, full account numbers, or personal data to hello@traqvera.com. Email is for coordination only.
Current claims
SOC 2Not currently claimed
ISO 27001Not currently claimed
PCI DSSNot currently claimed; card data is not part of the stated Pilot scope
Security contacthello@traqvera.com