Encrypted in transit
Traffic between your browser, our application and infrastructure providers is protected with HTTPS/TLS.
← Home
Privacy and security
How we protect your data.
We use layered technical and operational controls across the application, API and database. Access is restricted by role and workspace, and our controls are reviewed as the product evolves.
Access is limited
Role-based controls and tenant isolation restrict access to what is required to operate the service.
Credentials stay private
Sensitive service credentials remain server-side. We never request or store online-banking passwords.
How protection works
Practical controls across the platform.
Saia da Teoria is operated by GPF IT SOLUTIONS PTY LTD (ABN 57 638 578 140). Our controls evolve with the product and its regulatory obligations.
Authentication and sessions
Authentication is handled by a specialist identity provider. Application access tokens are kept in memory rather than persistent browser storage, reducing exposure after the browser session ends.
Workspace isolation
Every financial-data request is scoped to the authenticated customer workspace. API tenant checks are backed by database Row Level Security, and authorised administrative access is role-restricted and logged.
Bank connectivity status
Bank connectivity remains an administrator-only pre-production pilot. The implementation keeps provider credentials server-side and validates signed webhook events, but live CDR connections will not be offered until an approved access arrangement is in place.
Data minimisation and monitoring
We limit collection to information needed for requested product features. Security-relevant administrative access and operational events are recorded to support investigation and incident response.
Responsible reporting
Report a security issue.
Email contact@saiadateoria.com. Do not include passwords, bank credentials or unnecessary personal information. We will acknowledge credible reports and investigate them promptly.
Report a security issue →No online service can guarantee absolute security. This page describes current controls, not a certification or guarantee. We review them as the platform, threat landscape and applicable obligations evolve.