Your data stays where it belongs

• ·Processing and storage within the EU
• ·GDPR compliant, with a data processing agreement
• ·Read-only access where possible. Write access only where we have to book, and only on what you approved.
• ·No change to your ERP configuration

• ·Permissions set centrally, per workflow and per entity
• ·Approval stays with your people. Claridy proposes, your threshold decides what goes automatically.
• ·Access for our team to your environment only on request, and logged

Every action of every workflow records what was read, what was decided, at what confidence score, and what was written back. That log is searchable and exportable, and it is meant to be shown to an auditor.

That is not an extra feature but a consequence of how it is built: deterministic workflows can always explain why they did something. A model cannot.

There is no language model in the execution path. AI writes the workflow and helps with interpretation at the edges, but execution is deterministic code. A workflow that worked yesterday works the same today. There is no model update that quietly changes your booking behaviour.

Claridy was assessed externally by TAC Security in February 2026 against CASA Tier 2, the assessment built on the OWASP Application Security Verification Standard. All 108 requirements were reviewed: access control, cryptography, session management, data protection and injection prevention.

• ·CASA Tier 2, carried out by TAC Security, February 2026
• ·No critical, high or medium findings across the full application
• ·Cyber score 9.7 out of 10
• ·Encryption at rest and in transit, MFA enforced on admin accounts, daily dependency scans

A SOC 2 programme is under way. It goes here once the report exists.

• ·Monthly cancellable, and your data is exportable
• ·Your ERP stays authoritative, so stopping with Claridy does not leave your books stuck anywhere