Built for the scrutiny an audit platform deserves.
Your audit data is among the most sensitive in the organisation. Scrutive is deployed per customer and designed to pass an IT review, not a consumer sign-up.
Single-tenant deployment
Each customer has its own instance and database; your data stays in the deployment and region you approve.
Identity
Microsoft Entra ID sign-in, or approved local accounts with master approval, lockout after failed attempts and session timeouts.
Least-privilege access
Server-enforced rights per register: own items, view, review, edit and full. Auditor and top-management access granted separately.
Segregation of duties
Owners cannot verify their own controls; preparers cannot sign off their own work papers.
Audit trail
Changes, decisions, AI actions and every email sent are logged with who and when.
Safe file handling
Size and count limits, files served only as downloads (never executed), stored in your SharePoint or a private bucket, removed 90 days after verification.
Everything your reviewers will ask for.
During an evaluation we share an IT review pack covering architecture, authentication, data handling, Microsoft 365 permissions, AI data flows and deployment options.
| Area | How Scrutive handles it |
|---|---|
| Transport | HTTPS only, strict transport security, no framing |
| Browser | Content security policy, CSRF protection on every change |
| Microsoft 365 | Least-privilege app permissions agreed with your IT |
| AI | Off until a master switches it on; daily limits; model tier of your choice |
| Backups | Full data export for your own retention at any time |
| Certifications | We do not claim third-party certifications we do not hold; ask us for the current status |
Put Scrutive through your IT review.
We will walk your security team through the architecture and answer the questionnaire.