Security and data handling
A supplier's retail data is competitively sensitive and contractually protected. Here is exactly how it is stored, who can see it, and what we will never do with it. Written plainly, so your buyer or your IT lead can read it in five minutes.
Where it lives
| Isolation | Each client is a separate tenant with its own warehouse and its own cockpit process. The tenant is fixed when that process starts and is never chosen by the request. In our October 2026 isolation test, every route was attacked from one tenant toward another and none returned the other tenant's data. Tenants share one server today, and we are adding further separation between them at the system level. |
|---|---|
| Hosting | A managed cloud server we operate, reached only through a secure access network. The application binds to localhost and is never exposed directly to the internet. |
| Our providers | Our hosting and network providers each hold SOC 2 Type II reports for their own services. Those reports cover our providers, not TenX; TenX itself has not been through an audit. We name our providers in vendor reviews on request. |
| Sign-in | A one-time code sent to an allow-listed email. No passwords to leak or reuse. Access is granted per person, per tenant, and removed the same way. |
| Who may change things | Signing in grants viewing. Write actions (refresh, ledger edits) are limited to a separate allow-list, recorded in version control. The cockpit verifies a signed identity token, issued at sign-in for that client's site, on every request from the network, and refuses any request without a valid one. |
| Encryption | Encrypted in transit and at rest. |
| Releases | Every data publish is atomic: a new release is built and switched in one step, and the previous release is kept, so a bad load is rolled back with one command rather than repaired in place. |
| Secrets | Credentials live outside the codebase and are never committed. Per-tenant API keys are separate. |
What we will not do
No resale, no aggregation across clients, no benchmarking one supplier against another, no re-identification.
Your warehouse is yours. On termination it is returned and then destroyed, and we will put that in writing.
If something goes wrong with your data on our side, you hear it from us first, with what happened and what we did.
Vendor review
Send them. We answer security questionnaires directly, walk your IT lead through how a tenant is isolated and who can sign in, and put the commitments above in the contract. We will tell you plainly what we have in place and what we do not, including any certification we do not yet hold.
This page describes our current practice in plain language. It is not a certification.
Start here
Thirty minutes on a call. We walk a live cockpit set up for a fictional brand and show you where that problem would surface and what the ask would be. If it is not a fit, I will tell you that.
info@tenxanalytics.comEric Fritts · Founder · 479-713-0714 · Rogers, Arkansas
