Security & governance

Built to be the system of record

When Cairn holds your books and your operation, security isn't a feature, it's the foundation. Here's exactly what's in place today, and what's on the roadmap.

In place today

Multi-tenant data isolation

Every record is scoped to your organization and enforced at the database layer with row-level security, so your data is never commingled with another company's. Application code cannot bypass it.

Role-based access control

Granular RBAC with 25 built-in roles, custom roles, and segregation-of-duties checks (the person who approves a transaction can't be the one who created it).

Immutable audit trails

Every record carries a complete history. AI-drafted entries keep a link back to the exact source document, the model that drafted them, and the person who authorized the post.

Your data is yours

Your business data, formulations, recipes, pricing, and financials are never used to train shared or public foundation models.

Dedicated-tenant option

Enterprise organizations can run in their own isolated database with a data region of their choice, separate from the shared environment.

Human-in-the-loop AI

AI routines stage records for review; nothing posts to your ledger without explicit one-click human approval.

On the roadmap

Formal compliance certification

We're building toward SOC 2 Type II, which requires an independent auditor and a multi-month observation window. It is in progress, not yet certified, and we won't claim a badge we haven't earned. GDPR-aligned data handling and a formal data processing agreement are part of the same track. We're happy to walk security and compliance teams through our current controls and timeline on a call.

Talk to us about security

Replace your legacy ERP. In weeks.

Twelve months and six figures used to be the price of admission. Not anymore.

Get a demo

White-glove implementation No per-transaction fees No surprise invoices