Security & Compliance
Security is built into Senrub Insights
Senrub Insights is designed to handle commercially sensitive IT spend, contract and vendor information. We take security, privacy and data protection seriously — running on enterprise grade cloud infrastructure with encryption, layered access controls and independent certifications behind the service.
Data protection & encryption
- All traffic served over TLS/HTTPS by default — including our custom domain, senrub.com
- Data at rest encrypted with AES 256 across application storage, object storage and databases
- Database encryption keys are rotated automatically
- Secrets and connector credentials protected with KMS envelope encryption and tamper detection
- Secure authentication, application-level access controls and logical separation between organisations
Privacy & data ownership
- Your data remains your property at all times, and Senrub does not sell customer data
- Your data is never used to train AI models
- We don't access your data without your permission — except to provide support, maintain the service, or meet legal obligations
- Export your data at any time using standard MongoDB tools
- On account deletion, all associated data is permanently erased 45 days after confirmation (a revocable window)
How AI is used
Senrub uses OpenAI models to write the plain English spend and savings narrative, and Anthropic models to read uploaded contracts and extract terms, obligations, vendor commitments and risks, and to suggest vendor performance measures. Only the text needed for that task is sent, over encrypted connections, to the provider's API. Your documents and data are not used to train any model, are not retained by the providers beyond the request, and every AI output is labelled as informational and can be corrected by you before it is used.
Backups & resilience
Automated backups run on an hourly (7 day), daily (7 day), weekly (4 week), monthly (12 month) and yearly (1 year) schedule — with continuous Point in Time Recovery across a rolling 7 day window.
Platform security
Senrub Insights is built on modern, enterprise grade cloud infrastructure. Databases run on MongoDB Atlas, and deployments run in isolated containers with network policies enforcing separation between applications. Dedicated database infrastructure is available for enterprise needs.
Compliance & certifications
Our underlying enterprise grade cloud platform holds ISO 27001:2022 certification and has completed SOC 2 Type I, with SOC 2 Type II in progress. Certification documents, audit reports and compliance evidence are available on request via support@senrub.com.