Security

These controls are running in production. Each one is a check the product already makes before it returns company data.

Controls in production

  1. 01

    Sign-in

    A company workspace opens only after you sign in. The session belongs to that person.

  2. 02

    Company separation

    Opening a company, its documents, or its chat requires a membership of that company. A membership of one company does not open another.

  3. 03

    Role permissions

    A role can do only what it was granted. It cannot be given more than the person who created it holds. The company Admin membership stays in place.

  4. 04

    Member removal

    When an admin removes another member, that person’s next request to the company is refused. Their Truest account remains.

  5. 05

    HTTPS

    The public site and the API are served over HTTPS.

  6. 06

    Hosting

    The application and the database run in Microsoft Azure, in the UAE North region.

Report a security problem

If you believe you have found a security problem in Truest, email hello@truest.ae.