Security
DPX-Pro is built to reduce operational risk: consistent data entry, controlled document handling, and secure access patterns appropriate for construction finance workflows.
Access & Authentication
- Short-lived access mechanisms for user sessions (where applicable)
- Server-side validation of requests
- Least-privilege approach to permissions
Tokens & Secrets
- Secrets stored server-side (not embedded in client apps)
- Environment-driven configuration
- Operational controls for token refresh/rotation (deployment dependent)
Document Handling
- Receipt and PDF attachments handled as business records
- Report PDFs generated with consistent metadata
- Background-worker processing supported for large reports
Data Minimization
- Only collects what is needed to create Direct Costs and reports
- No selling of customer data
- Retention policies can be configured by deployment
Note:
DPX-Pro integrates with third-party platforms. Security posture also depends on your platform configurations,
user permissions, and your organization’s operational policies.