Architecture, verifiable
The full security architecture — on request.
See how row-level isolation, step-up reverification, hash-chain audit logging and per-org encryption hold up to an institutional security review. Request the full overview and we'll walk you through it.
Data Encryption
All Systems Activecard_last4: ••••
payout_amt: ••••••
↓ Decrypted only at point of use
AES-256 encryption protects every transaction and every record — in transit and at rest. Payment data never touches our servers. Stripe handles it end to end.
Trust Center
Every document your procurement team needs.
Review our legal, security, and compliance posture documents — no gate, no request required. The same audit package enterprise buyers expect.
Sub-processors
Every third-party vendor with access to your data — their purpose, what data they see, and where.
Service Level Agreement
Our uptime posture, support response targets, and contractual commitments at the enterprise tier.
Data Processing Agreement
How BasePro handles data on your behalf as a processor — security measures, sub-processor chain, and breach notification.
Acceptable Use Policy
What the platform is for, what it is not for, and how violations are handled.
Accessibility Statement
Our WCAG 2.1 AA posture — keyboard navigation, colour contrast, reduced-motion, and how to report gaps.
Compliance Posture
CFDI, ARCO / LFPDPPP, and GDPR-aligned practices — honest about what is live and what is rolling out.
Terms of Service
The legal terms governing your use of the BasePro platform and related services.
Privacy Policy
What personal data we collect, why, how long we keep it, and your rights under applicable law.
Cookie Settings
Which cookies the site sets, why, and how to manage or opt out of non-essential cookies.
Get notified when our sub-processor list changes.
We provide 30 days advance notice of material changes. One email per change — never marketing.
See the full security architecture
Share a few details and we'll open the complete overview — and set up a walkthrough with our team.
- Business-protection deep-dive: financial precision, continuity, insurance and regulatory readiness
- Compliance maturity roadmap, layer by layer
- Documented for your auditor, security review and privacy counsel