How Procura looks after your data
What is true of this system as built. Where something depends on how it is hosted, it says so.
Where your data is kept
This service stores its database and files in DigitalOcean, Bangalore (India). Backups are taken by the hosting operator; the deployment guide asks for daily database and file backups with a tested restore.
Who can see what
- Every record belongs to one organization, and every query is limited to it in the code, not only on screen. Automated checks try to open other organizations' records and expect to be refused.
- Within your organization, roles decide what each person can see and do, and approval limits decide what they can approve.
- Supplier bank details need a separate permission, and changing them needs a second person's approval.
- Sealed tender bids cannot be read by anyone, including the platform's own staff, until they are opened. Platform staff have no automatic access to your tenders or commercial documents.
Signing in
- Passwords are stored as salted hashes (scrypt), never in readable form. Repeated wrong attempts lock the account for 15 minutes.
- Two-step sign-in with an authenticator app is available to every user.
- Sessions expire after a set time, and signing out ends them at once.
Records you can rely on
- Changes to suppliers, prices, approvals, payments and settings are written to an audit log that shows who, what and when.
- An approval in Procura, including by WhatsApp reply, is a recorded decision by a signed-in person or verified number. It is not a legally verified digital signature.
- Figures read from photos or documents are suggestions until a person checks them; nothing read automatically commits money.
Your data is yours
Administrators can download everything as CSV files at any time, and connect other tools through read-only API keys.
AI
- AI is off unless the operator connects an AI service (this installation has none) and an organization's administrator switches it on in Settings › AI.
- When it is on, only what a task needs is sent: the text of a document someone uploaded, a question typed on the Ask page, or the facts shown on the negotiation page. Never the whole database.
- AI never changes, approves, sends or pays anything. It fills a form that a person checks. Readings that fail arithmetic checks are not used, and every screen says whether AI or the built-in rules were used.
- Invoice and receipt photos are read on the server itself, without AI.
Email intake
If an organization connects a mailbox, attachments are copied into its review queues and the message is marked read. Message bodies are not kept beyond the subject and sender. Demo organizations never connect to a real mailbox.
Secrets
Connection keys for accounting, e-invoicing and payments, and sign-in secrets, are stored encrypted. Card details are handled by the payment provider and never reach this system.
What we do not claim
This installation has no security certification (such as ISO 27001 or SOC 2) unless its operator states one separately. Report a security concern to the operator of this service.