How Trisova looks after your data

• Your data is stored in the European Union (Ireland).
• It's encrypted when stored and when it travels between your browser and Trisova.
• Every organisation's data sits behind access rules in the database itself, so one customer can never see another's.

• People see only the areas they've been given: someone in Health & Safety sees Health & Safety, not supplier contracts or spend.
• Suppliers only ever see their own portal, never your internal records.
• Owners and admins must use two-factor sign-in; everyone else can turn it on.
• Sign-in with Microsoft or Google can be switched on for your organisation.
• Important changes (deletions, settings, approvals, AI drafts and imports) are recorded in an audit log: who did what, and when.

AI drafts and suggests; a person always decides. Each AI feature can be switched off. The full list of what the AI does, what it sees and who approves its work is on How we use AI.

We aim to meet WCAG 2.2 at level AA. What works, what doesn't yet and how to tell us about a problem is in our accessibility statement.

Our privacy policy, terms of service, data processing agreement and sub-processors (drafts, under legal review).

Send your security questionnaire or any question to hello@trisova.com.

Last reviewed 28 October 2026.