Security

Not a certification page. This is an honest summary of how CHKDAT is operated today — not a SOC 2, ISO, or other compliance attestation.

Multi-tenant isolation

  • Each customer/store environment is a separate tenant with its own MySQL database and file directory under a dedicated tenant path.
  • Hostname routing maps {tenant}.chkdat.com to that tenant’s data.

Access control

  • Tenant application access requires authenticated login for that tenant.
  • Platform administration is separate from tenant logins and is not linked from the public marketing site.

Data in transit

  • chkdat.com and tenant hostnames are served over HTTPS with HSTS enabled.

Third-party processing

  • Invoice document OCR uses Azure AI Document Intelligence when that feature is enabled for a tenant.
  • Bank statement PDF extraction may use Adobe PDF Extract in the bank OCR worker where configured.

What we do not claim (yet)

  • No SOC 2 / ISO public attestation is listed here.
  • No uptime SLA badge is published on this page until contractually defined.

Questions

Contact us via chkdat.com/contact for security questionnaires.