SECURITY & COMPLIANCE

Real operations.Held plainly.

Our systems run on real operations — real invoices, real employee data, real numbers. Here's exactly what that means for how they're built and who holds what. Nothing below is a promise beyond what's actually built.

Your data is yours — both ways

Tailored builds (custom) run on infrastructure you own — your hosting, your accounts, your keys; Glendale holds nothing. Subscriptions (GlenForge^™, GlenScout^™, GlenDesk^™) run on Glendale-managed infrastructure, where every company's data is walled off from every other's — enforced at the database level, never pooled, never resold. Either way your data stays yours: export it any time, both ways. Lapse a subscription and it goes read-only — never deleted, never held hostage.

Role-based access, built in

Owner, office, and field see what's built for their job — not the whole system by default. These permission views are real and demonstrable in the working demo, not a promise for later.

A security baseline on every build

Every build and hosted product passes a pre-ship security check before it goes live: strong password hashing, encrypted connector secrets, signed sessions, security headers, rate limiting, input validation, and secure logging.

Human approval on anything outward-facing

Automations that act outside the system — sending an email, triggering a notification — ship with a human-approval step by default. Nothing sends on its own unless that's specifically what was agreed to.

Encrypted, backed up, recoverable

Connections are encrypted end to end; passwords are hashed and any connected-account credentials are encrypted, never stored in the clear. Automated backups with tested restore are built into the hosted setup — a bad day is a recovery, not a loss.

Least-privilege access, logged

Reach is scoped to what a task actually needs — no blanket access to your data — and sensitive actions leave an audit trail. Third-party connections are permissioned by you, and revocable any time.

We're a Canadian company, based in Alberta, and we build to this standard because the operations running on our systems can't afford not to.