Security and trust
Your business runs on this system, so it has to be built the way a bank would build it. Here is what that means in practice.
Where it runs
Every client has their own hosted system. Your data is not pooled with anyone else's. The platform runs on Microsoft Azure, encrypted in transit and at rest, with hosting in the United Kingdom by default and other regions available by arrangement.
Who gets in
Office users sign in through your own Microsoft organisation, with its multi-factor protection. No separate passwords to manage or leak.
Every page and every record is governed by role. People see what their job needs and nothing else.
Every action is recorded: who did what, and when. Yours to inspect at any time.
When someone's employment ends, so does their access. The platform checks, so nobody has to remember.
Every request to the platform passes through a single gateway that verifies who is asking before anything is answered.
People in the field sign in on their phones with their own verified identity, and the phone can only reach what the field app needs.
Your data
Who can see a piece of data, where it lives and where it goes are settled when a feature is designed, before any of it is built. Arkemodi processes your data under UK GDPR, with written data processing terms in place with every client. Your data is yours: we hold it to run your system, and for nothing else.
How it's built
Security is part of how Arkemodi Forge builds, not a phase at the end. Every change is independently tested against the criteria you agreed. A senior engineer reviews every stage, from requirement to release, against Arkemodi's engineering standard. Nothing reaches your system until it passes. How Forge works →
Straight answers
Independent penetration testing and SOC 2 assurance are on our roadmap. Ask us where we are, and we'll tell you exactly.
If your procurement team has a security questionnaire, send it. We answer every line.