Encrypted in transit and at rest
Every connection to SidraStack runs over TLS, and data is encrypted at rest across every app in SidraStack Office — no exceptions, no opt-in required.
Security isn't a feature you turn on in SidraStack — it's the default state of the network. Whether you're opening a dashboard in Innovex (Sales & CRM) or syncing a record from Tribe (People & HR), the request never leaves your browser unencrypted, and it never lands on a disk unencrypted either.
In transit
All traffic between your browser, our apps, and our identity provider is encrypted over HTTPS. That covers every request across SidraStack Office — Innovex (Sales & CRM), Elevate (Finance & ERP), Tribe (People & HR), Essence (Projects), and Relay (Service Desk) all sit behind TLS, terminated at the edge and re-verified at each internal hop before a request reaches application code.
Nothing is ever sent in the clear — not credentials, not session tokens, not the data itself.
At rest
Databases and file storage are encrypted at rest by default, with no per-customer configuration required. Access to production data is restricted to what each service needs to function — application code doesn't get broader access than the job in front of it.
“Encrypted in transit and at rest isn't a plan on our roadmap — it's already how every app in SidraStack Office runs, today.”
What this doesn't cover
Encryption protects data in motion and on disk — it doesn't replace access control or audit logging, which vary by app today. See access controls and audit logs for exactly where each stands.
SidraStack Office is the all-in-one suite of apps — Innovex (CRM), Elevate (ERP), Tribe (HR), Essence (Projects), and Relay (Desk) — for growing businesses. This page reflects how the platform actually handles security today, including what isn't built yet. Questions from your security or procurement team? Talk to us directly.
