SECURITY & TRUST

Your commercial data is the business. We treat it that way.

Command CGP™ holds the most sensitive numbers a manufacturer has — costs, prices, and margins. The platform is built, hosted, and operated accordingly.

01

Architecture

Multi-tenant cloud platform on a PostgreSQL relational core. Tenant isolation is enforced at the database layer through row-level security — every query is scoped to the customer's tenant by the database itself, not by application code convention. Role-based access control governs who can see and change commercial data within each customer.

02

Data protection

Encryption in transit (TLS) and at rest. Full change history is preserved by design — commercial records are amended, not silently overwritten. Automated backups with tested restoration.

03

Infrastructure partners

The platform is delivered on the infrastructure of established cloud providers selected for their published, independently audited security programs — including SOC 2 Type 2 attestation and ISO 27001 certification, with continuous monitoring, DDoS protection, and globally distributed, redundant delivery. We inherit and build upon controls that are examined by independent auditors and documented publicly.

04

Data ownership

  • Your data is yours.
  • It is never commingled with another customer's.
  • It is never used to benefit another customer.
  • It leaves with you if you leave — complete export, standard formats.
05

Practices

Least-privilege access internally; production access is restricted and logged; security review is welcomed — customer security reviews are welcome. Bring your questionnaire.

Reviewing Command CGP for your organization?

Send your security questionnaire. We respond directly, on the record.