Trust
How tenant data is isolated
TracePharma is multi-tenant SaaS with a central control plane and a separate database per customer tenant. We do not publish a SOC 2 report on this site. Request a security questionnaire on the demo.
These are product facts, not a certification claim. If you need a signed questionnaire, bring it to the demo. We reply within one business day.
Tenant isolation
Each customer tenant has its own database. EPCIS events, serials, and partner records do not share tables with other tenants.
Central vs tenant
The marketing site, demo requests, and admin control plane live on the central application. Warehouse and compliance work runs on the tenant subdomain.
Access
The tenant app and the platform admin panel are authenticated surfaces. Tenant APIs use token authentication (Laravel Sanctum). Test tenants are not provisioned on customer production hosts.
Transport
The public site and tenant apps are served over HTTPS. Partner EPCIS uses AS2, SFTP, or HTTPS as scoped for your connections.
What this page does not claim
We do not list named customer logos here. We do not claim SOC 2, ISO 27001, or HIPAA certification on this page. Those statements belong in a signed packet if and when they apply.
Bring your security questionnaire to the demo
We walk the isolation model and reply within one business day.
30–45 minutes on a profile-tuned workspace. We reply within one business day.