Security and trust
A control plane holds a map of your estate. Here is how that map is held.
Tenancy
Every customer-owned table is scoped to the organisation from the session, never from the request, and the platform refuses a query that forgets. Twelve customer roles enforced in the service layer; a permission you lack answers as if the page did not exist.
Sign-in and support access
Sign-in is by emailed single-use link; there is no password to leak. Support access by ArcSystemsTechnology is explicit, time-bound, logged, and visible to your administrators with its reason.
Audit
Every privileged action — membership, ownership, edits, thresholds, exceptions, approvals, investigations, operator actions — writes an audit event your administrators and auditors can read, with the changed fields before and after.
Hosting and backups
The service and its storage run in Europe (EU West), with encrypted, verified backups shipped off-site daily and a restore that is rehearsed, not assumed. Connector credentials are held by reference and resolved for one read; no secret is ever shown on a screen.
What we do not claim
ArcConverge does not hold a third-party security certification at this stage, and this page will say so until it does. The data processing agreement, the sub-processor register and the retention schedule are published before the first customer is onboarded.