Security and control
Financial data requires more than a simple user account.
Tréso’s security starts with company isolation and server-side verification for every access. It continues with protected sessions, encrypted secrets and traceability suited to sensitive operations.
Security
Financial data requires more than a simple user account.Illustrative photography
Isolation
A browser identifier is never an authorisation.
For every read or write, the application must check identity, organisation, active dossier, role and permission. These controls live server-side, close to the data.
- Multi-company isolation in the model and queries.
- Explicitly assigned dossiers for firm staff.
- Access denied by default without demonstrated permission.
Authentication
Opaque sessions, with MFA for sensitive roles.
Passwords are never stored in plain text. Sessions are opaque tokens in protected cookies, and multi-factor authentication is planned for profiles managing sensitive access.
- Password hashing resistant to offline attacks.
- HttpOnly, SameSite and Secure cookies under HTTPS.
- TOTP MFA with protection against code replay.
Traceability
Know an action happened without making logs a copy of the data.
Sensitive events are recorded with context useful for operations. Financial content and secrets stay out of error messages and logs.
- Audit of authentication and access operations.
- Idempotent imports with controls before financial writes.
- Encrypted secrets separated from presentation data.
Production conditions
Security is not declared: it is tested with real infrastructure.
Going live still requires provider selection, production configuration, restoration tests and an independent review appropriate to the risk. That must not be confused with a functional demo.
- Hosting and database limited to the European Union.
- Pre-production tests with the providers actually selected.
- Security review and restoration validated before sale.
See it before you believe it
Explore an explainable forecast in a few minutes.
The demo uses fictional data only. It shows how Tréso brings forward the low point, confidence and action to take.